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Abstract 


Few  systems  for  mechanical  proof-checking  have  been  used  so  far  to  transform 
formal  proofs  rather  than  to  formalize  informal  arguments  and  to  verify  correctness. 
The  unwinding  of  proofs,  namely,  the  process  of  applying  lemmata  and  extract¬ 
ing  explicit  values  for  the  parameters  within  a  proof,  is  an  obvious  candidate  for 
mechanization.  It  corresponds  to  the  procedures  of  Cut-elimination  and  functional 
interpretation  in  proof-theory  and  allows  the  extraction  of  the  constructive  content 
of  a  proof,  sometimes  yielding  information  useful  in  mathematics  and  in  computing. 


Resource- aware  logics  restrict  the  number  of  times  an  assumption  may  be  used 
in  a  proof  and  are  of  interest  for  proof-checking  not  only  in  relation  to  their  de¬ 
cidability  or  computational  complexity,  but  also  because  they  efficiently  solve  the 
practical  problem  of  representing  the  structure  of  relevance  in  a  derivation.  In  par¬ 
ticular,  in  Direct  Logic  only  one  subformula-occurrence  of  the  input  is  allowed,  and 
the  connections  established  during  a  successful  proof- verification  can  be  represented 
on  the  input  without  altering  it.  In  addition,  the  values  for  the  parameters  obtained 
from  unwinding  are  read  off  directly,  y 

In  Linear  Logic ,  where  classical  logic  is  regarded  as  the  limit  of  a  resource- aware 
logic,  long-standing  issues  in  proof-theory  have  been  successfully  attacked.  We  are 
particularly  interested  in  the  system  of  proof-nets  as  a  multiple-conclusion  Natural 


Deduction  system  for  Linear  Logic. 


In  Part  I  of  this  thesis  we  present  a  new  set  of  tools  that  provide  a  systematic 


and  uniform  approach  to  different  resource- aware  logics.  In  particular,  we  obtain 
uniqueness  of  the  normal  form  for  Multiplicative  and  Additive  Linear  1  c>c  (sections 
3  and  4)  and  an  extension  of  Direct  Logic  of  interest  for  nonmonr  tonic  reasoning 
(section  8).  In  Part  II  we  study  Herbrand’s  Theorem  in  Linear  Logic  and  the 
No  Counterexample  Interpretation  in  a  fragment  of  Peano  Arithmetic  (section  10). 


As  an  application  to  Ramsey  Theory  we  give  a  parametric  form  of  the  Ramsey 
Theorem,  that  generalizes  the  Infinite,  the  Finite  and  the  Ramsey-Paris-Harrington 
Theorems  for  a  fixed  exponent  (sections  10-13). 
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1.  Introduction. 

It  has  often  been  remarked  that  a  proof,  in  mathematics  as  well  as  in  common 
sense  reasoning,  contains  more  information  than  the  simple  fact  that  its  conclu¬ 
sion  is  true  and  serves  purposes  other  than  simply  to  convince  us  of  its  truth.  In 
particular,  a  proof  that  some  object  exists  which  satisfies  certain  conditions  often 
provides  a  computational  method  to  construct  such  an  object,  or  at  least  some  in¬ 
dication  of  how  it  can  be  obtained  when  additional  information  is  provided.  Thus 
mathematical  proofs  are  interesting  for  computation  and  the  techniques  of  analy¬ 
sis  of  mathematical  proofs,  when  applied  to  common  sense  reasoning,  may  lead  to 
interesting  applications  in  engineering. 

In  some  sense  proof  theory  —  the  study  of  logical  inference  —  is  the  oldest 
branch  of  logic.  The  traditional  questions  ‘  What  is  a  proof?'  and  ‘  What  k;nd  of 
knowledge  do  we  obtain  through  deductive  reasoning?'  have  been  asked  since  the 
beginning  of  scientific  thought.  Since  Euclid,  the  axiomatic  method  in  mathematics 
has  been  the  main  paradigm  of  correct  and  successful  deductive  inference.  Like 
the  other  branches  of  logic,  proof  theory  owes  its  present  form  to  the  mathematical 
development  of  logical  symbolism.  Sharper  questions  are  asked  today;  namely, 

‘  When  do  two  different  formal  derivations  represent  the  same  informal  proof?'  and 
‘  What  information  does  a  proof  indirectly  contain  and  how  can  it  be  made  explicit?' 
It  would  therefore  be  reasonable  to  expect  that  progress  in  proof  theory  would 
contribute  to  our  understanding  of  mathematical  reasoning,  and  that  this  in  turn 
would  lead  to  a  genuine  contribution  by  proof  theory  to  the  solution  of  mathematical 
problems. 

Different  strategies  have  been  followed  in  the  development  of  logic  and  of  proof 
theory.  Such  differences  have  sometimes  been  regarded  as  arising  from  conflicting 
philosophical  approaches  and  not  simply  from  different  styles  of  reasoning  or  math¬ 
ematical  tastes.  Rather  than  discuss  these  philosophical  issues  directly  here,  we  will 
provide  a  framework  within  which  our  technical  results  are  to  be  understood  and 
evaluated.  Our  strategy  is  to  circumvent  traditional  controversies  and  to  provide 
some  results  that  are  directly  relevant  to  the  theoretical  issue  of  identity  of  proofs, 
and  other  results  which  contribute  to  the  practical  task  of  extracting  implicit  infor¬ 
mation  from  given  mathematical  proofs. 
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In  this  introduction,  the  problem  of  identity  of  proofs  is  considered  in  the 
light  of  Gentzen  and  Prawitz’s  fundamental  contributions  and  of  the  more  recent 
developments  by  Ketonen  (Direct  Logic)  and  Girard  (Linear  Logic).  Our  main 
technical  results  in  this  area  will  be  presented  and  their  significance  indicated.  Next, 
the  problem  of  extracting  implicit  information  from  mathematical  proofs  is  briefly 
discussed,  and  an  application  to  Ramsey  Theory  is  presented. 
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1.1.  Features  and  Problems  in  Gentzen’s  Calculi. 

Natural  Deduction  and  Sequent  Calculus.  The  lasting  appeal  of  the  contri¬ 
butions  of  G.  Gentzen  (Szabo  [1969])  to  proof  theory  seems  to  lie  more  in  their 
phenomenological  nature  than  in  their  foundational  concerns.  His  system  of  Natural 
Deduction  allows  the  introduction  of  assumptions  and  their  removal  (we  speak  of 
open  and  closed  assumptions)  and  provides  an  introduction  rule  and  an  elimination 
rule  for  each  logical  symbol  ‘o’.  An  introduction  rule  allows  the  formal  inference  of 
an  expression  with  o  as  the  principal  symbol  (o- expression),  and  an  elimination  rule 
specifies  how  an  o-expression  can  be  used  to  infer  other  expressions.  For  instance, 
the  introduction  and  elimination  rules  for  A  have  the  forms 

A  —  Introduction  A-Eliminations 

A  B  A  A  B  A  A  B 

AaB  A  B 

The  Inversion  Principle  is  the  requirement  that  for  each  o,  the  introduction  and 
elimination  rules  for  o  must  be  dual,  in  the  sense  that  an  introduction  rule  followed 
by  an  elimination  rule  yields  one  of  the  original  premises.  From  a  phenomenolog¬ 
ical  point  of  view  the  analysis  of  informal  reasoning  through  Natural  Deduction  is 
generally  regarded  as  adequate.  Prawitz  [1965]  made  Natural  Deduction  a  viable 
mathematical  tool  with  his  proof  of  the  Normalization  Theorem. 

Gentzen  [1935]  had  proved  an  analogous  result  (the  Hauptsatz  or  the  Cut 
Elimination  Theorem )  for  his  other  creation,  the  system  of  Sequent  Calculus.  The 
calculus  is  based  on  sequences  of  expressions  of  the  form  A\ , . . . ,  Am  h  B\ , . . .  B„ 
( sequents ),  to  be  interpreted  as  formulas  f\t  A,  D  \J }Bj.  Well-formed  trees  of  se- 
quents  ( sequent  derivations)  represent  informal  arguments.  The  expressions  in  the 
left  part  of  a  sequent  (the  antecedent )  may  be  regarded  as  assumptions  and  those 
in  the  right  part  (the  succedent)  may  be  regarded  as  conclusions  of  the  informal 
argument  that  is  represented  by  the  derivation  ending  with  the  sequent  in  question. 
In  a  sequent  derivation  some  sequents  (axioms)  represent  unanalyzed  inferences.  If 
S  is  not  an  axiom  sequent,  then  S  ( lower  sequent)  is  inferred  from  other  sequents 
Si  ( upper  sequents),  and  in  this  case  an  inferential  link  may  be  established  between 
a  new  occurrence  of  a  formula  ( principal  formula)  in  the  antecedent  or  in  the  con¬ 
sequent  of  S  and  some  occurrences  of  formulas  in  the  sequents  5,  (active  formulas). 
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For  each  logical  symbol  o  there  are  o -left  and  o-right  rules.  A  rule  for  o  allows  the 
inference  of  a  sequent  whose  principal  formula  is  a  o-expression  and  occurs  in  the 
antecedent  (a  left  rule)  or  in  the  succedent  (a  right  rule).  For  instance,  the  left  and 
right  rules  for  A  have  the  forms 

A  —  Right  A-Left 

F  l~  A,  A  rt-A  ,B  A,TKA  bj\-  a 

rt-A,AA5  A  A  R,  T  b  A  A  A  £,F  b  A 

(Here  T  and  A  stand  for  sequences  of  formulas.)  A  left  rule  corresponds  to  a  step 
of  an  informal  argument  whereby  given  assumptions  are  inferred  from  a  new  as¬ 
sumption  and  a  right  rule  corresponds  to  a  step  from  given  conclusions  to  a  new 
conclusion.  In  addition,  the  lower  sequent  S  contains  all  formulas  of  the  upper  se- 
quents  Si  different  from  the  active  formulas.  Thus  an  inference  in  Sequent  Calculus 
always  updates  the  context  of  the  assumptions  and  conclusions  of  the  informal  ar¬ 
gument.  Therefore,  the  right  and  the  left  o-rule  of  the  Sequent  Calculus  correspond 
in  Natural  Deduction  to  the  o-introduction  and  (the  inversion  of  )  the  o-elimination 
rules,  respectively,  and  in  the  Sequent  Calculus  the  Inversion  Principle  is  represented 
by  the  duality  of  the  left  and  right  rules  for  o. 

In  Natural  Deduction  the  following  deductive  procedures  can  be  represented: 
replacing  an  open  assumption  A  of  a  deduction  V 2  with  a  deduction  V \  of  A  ( sub¬ 
stitution );  proving  a  more  general  lemma  ( maximal  formula)  and  then  applying 
it.  The  two  procedures  are  different;  only  some  substitutions  have  the  effect  of 
generating  a  new  maximal  formula  in  the  resulting  derivation.  For  instance,  if 

A 

V\ 

A  B 

are  Natural  Deduction  derivations  and  the  assumption  A  is  open  in  V2  then  sub¬ 
stitution  yields  a  deduction  V  of  the  form 

A 

V2 

B 
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However,  >1  is  a  maximal  formula  in  V  only  if  it  is  the  consequence  of  an  introduction 
rule  in  V\  and  the  premise  of  an  elimination  rule  in  V2  • 

In  Sequent  Calculus,  the  operation  of  substitution  is  represented  by  the  formal 
rule  of  Cut. 

Cut: 

rhA,A  A,nbA 

r,ni-A,A 

The  active  formulas  in  an  application  of  this  rule  ( cut  formulas )  play  the  same  role  as 
a  maximal  formula  in  a  Natural  Deduction  derivation,  except  when  one  of  the  active 
formulas  already  occurs  in  a  sequent  axiom.  Thus  a  procedure  to  eliminate  the  rule 
Cut  from  a  system  of  Sequent  Calculus  corresponds  to  a  procedure  to  eliminate 
maximal  formulas  in  a  corresponding  system  of  Natural  Deduction.  A  Natural 
Deduction  derivation  is  normal  if  it  contains  no  maximal  formulas  (“ All  lemmata 
have  been  applied").  A  Normal  form  theorem  for  a  Natural  Deduction  system  for  a 
certain  logic  asserts  that  every  theorem  of  that  logic  can  be  derived  with  a  normal 
proof  in  the  system.  A  Cut- Elimination  Theorem  asserts  that  every  theorem  of  a 
certain  logic  is  provable  in  a  Sequant  Calculus  for  the  logic  in  question,  without  the 
Cut  rule.  The  existence  of  such  a  theorem  for  a  certain  logic  depends  of  course  on  the 
non-logical  axioms  and  rules  of  inference  of  the  system.  A  Normalization  (or  Cut- 
Elimination)  Theorem  may  sometimes  be  obtained  by  model-theoretic  techniques. 
A  proof-theoretic  method  usually  provides  (1)  a  set  of  reduction  steps,  one  for 
each  pair  of  introduction  and  elimination  rules,  and  (2)  a  reduction  procedure  that 
always  produces  a  suitable  sequence  of  reduction  steps  yielding  a  normal  proof  (a 
normalization  theorem )  or  that  makes  every  sequence  of  reduction  steps  terminate 
(a  strong  normalization  theorem). 

Basic  Results  for  the  Gentzen-Prawitz  Calculi.  Natural  Deduction  for  intu- 
itionistic  logic  and  Sequent  Calculus  for  classical  logic  still  remain  the  main  success 
stories  of  proof  theory.  The  use  of  proof- theoretic  methods  seems  essential  in  these 
contexts.  So  feu,  model-theoretic  methods  have  only  provided  weaker  and  less  in¬ 
formative  versions  of  the  Hauptsatz. 

From  the  preceding  summary  it  may  seem  that  a  Natural  Deduction  and  a 
Sequent  Calculus  for  some  logic  are  only  minor  variants  of  the  same  formal  analysis 
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of  intuitive  reasoning.  This  view  is  too  simplistic,  as  is  clear  from  the  facts  indicated 
below.  (A  detailed  analysis  of  the  relationships  between  the  two  formalisms  and  in 
particular  of  the  Cut-Elimination  and  Normalization  Theorems  is  in  Zucker  [1974] 
and  Ungar  [1986].) 

(1)  In  Natural  Deduction  the  verification  of  the  correctness  of  an  inferential  step  may 
require  a  global  examination  of  the  deduction.  In  Sequent  Calculus  the  verification 
of  the  correctness  of  an  inferential  step  requires  only  local  consideration  of  the 
sequents  involved. 

(2)  In  a  system  of  Natural  Deduction  with  rules  for  A,  V,  D,  V,  3  and  _L  ( falsity ) 
formalizing  intuitionistic  first  order  logic,  the  Strong  Normalization  Theorem  holds 
and  the  normal  form  is  unique  modulo  permutations  of  the  V  elimination  and  3 
elimination  rules.  The  Normalization  Theorem  also  holds  for  higher  order  logic. 

(3)  In  a  Sequent  Calculus  with  rules  for  A,  V,  D,  V  and  3  formalizing  classical 
higher  order  logic,  the  Cut  Elimination  theorem  holds. 

(4)  A  sequent  calculus  with  rules  for  A,  V,  D,  V  and  3  formalizing  intuitionistic 
logic  can  be  obtained  by  restricting  the  classical  Sequent  Calculus  to  sequents  with 
at  most  one  formula  in  the  succedent. 

In  Sequent  Calculus  uniqueness  of  cut-free  derivations  is  not  an  issue;  in  fact,  a 
well-known  result  by  Kleene  [1952]  gives  rather  general  conditions  that  allow  per¬ 
mutation  of  inferences  in  classical  and  intuitionistic  Sequent  Calculi.  Using  (2)  and 
(4)  for  the  fragment  of  intuitionistic  logic  without  V  and  3,  we  can  define  a  many- 
to-one  mapping  7r  such  that  if  V  is  a  Sequent  Calculus  derivation  of  B\ , . . . ,  Bn  b  A, 
then  7r(Z?)  is  a  Natural  Deduction  derivation  of  A  from  B i, . . .  ,Bn. 

Prawitz  obtained  a  Natural  Deduction  representation  of  classical  logic  that  es¬ 
sentially  uses  Godel’s  double  negation  interpretation.  He  considers  the  fragment 
with  rules  for  A,  D,  V  and  (a  rule  equivalent  to)  double  negation  elimination  re¬ 
stricted  to  ->-'A  with  A  atomic.  This  representation  is  not  natural.  A  classical 
derivation  V  of  B\ , . . . ,  Bn  b  A] , . . . ,  Am  can  be  represented  by  Natural  Deduction 
derivations  V}  of  A;  from  £?i,. -’Ai,...,  — ' Ay_ j ,  ->Ay+i ,...,~'Am,  for  j  <  m. 
Thus  the  result  of  the  previous  paragraph  is  out  of  the  question.  More  important 
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is  the  fact  that  the  restriction  on  the  double  negation  rule  returns  as  a  problem  as 
soon  we  work  with  extensions  of  (this  representation  of)  classical  logic.1 

It  might  seem  that  the  distinctive  properties  of  the  systems  of  Natural  De¬ 
duction  and  Sequent  Calculus  could  capture  the  important  structured  distinctions 
between  classical  and  intuitionistic  logic.  In  particular,  Prawitz  and  Dummett  (see 
Dummett  [1977])  noted  that  the  introduction  rules  of  Natural  Deduction  suggest 
an  operational  interpretation  of  the  logical  connectives  very  close  to  their  intuition¬ 
istic  meaning,  and  that  such  an  interpretation  seems  impossible  for  the  law  of  the 
excluded  middle.  They  used  this  fact  to  argue  in  favor  of  Intuitionism  versus  Clas¬ 
sical  Logic.  This  foundational  twist  was  already  present  in  severed  passages  by 
Gentzen  himself. 

However,  the  formal  features  of  Gentzen-Prawitz’s  calculi  might  also  suggest  a 
different  argument;  namely,  that  in  Natural  Deduction  as  well  as  in  Intuitionistic 
Logic  we  see  a  basic  asymmetry  between  assumptions  and  conclusions,  which  is 
eliminated  in  Sequent  Calculus  and  in  Classical  Logic.  Such  a  line  of  thought 
was  pursued  by  Girard  (see  Girard  [1987b],  [1988]).  We  believe  that  Girard’s 
analysis  significantly  advances  the  program  initiated  by  Gentzen  and  Prawitz.  We 
will  defend  this  claim  in  the  first  part  of  this  dissertation. 

1.1.1.  An  Overview  of  Direct  and  Linear  Logic. 

Multiple  Conclusion  Natural  Deduction.  A  natural  way  to  extend  the  map¬ 
ping  7r  from  intuitionistic  to  classical  logic  would  be  to  provide  a  system  of  Natural 
Deduction  in  which  the  rules  are  allowed  to  have  multiple  conclusions.  Extensive 
efforts  in  this  direction  (see  Ungar  [1986] )  have  not  yet  brought  conclusive  results. 
To  bring  this  problem  closer  to  a  solution,  fragments  of  classical  propositional  logic 
have  to  be  considered  first. 

1  As  an  example,  consider  the  Normalization  Theorem  for  a  Natural  Deduction  system 
for  GL,  the  modal  system  for  the  logic  of  provability  (see  Beilin  [1985]).  Here  the  Nat¬ 
ural  Deduction  framework  permits  an  elegant  representation  of  the  main  diagoi.alization 
property  of  this  logic  —  namely,  if  we  have  a  derivation  of  A  from  a  class  of  assump¬ 
tions  of  the  form  Q4,  then  we  can  conclude  Q4  and  discharge  the  class  of  assumptions  in 
question.  However,  the  double  negation  elimination,  applied  to  -'-QA,  requires  massive 
transformations  in  the  proof  of  normalization. 
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Relevance  Logics.  Rather  puzzling  results  came  from  Relevance  Logic,  a  tradi¬ 
tional  family  of  subsystems  of  classical  logic  sharing  the  property  that  their  Sequent 
Calculus  does  not  admit  the  Weakening  rule. 

Weakening: 

h  r 
h  r,A 

In  1984  Urquhaxt  proved  that  propositional  relevance  logic  is  undecidable.  However, 
the  system  of  Sequent  Calculus  for  propositional  relevance  logic  with  the  Mingle  rule 

Mingle: 

nr  ha 

h  r,A 


is  decidable. 

Direct  Logic.  From  our  point  of  view  the  most  important  contribution  arrived 
from  another  direction,  namely  from  logics  that  are  resource  aware  —  shall  we  speak 
of  ecological  logics?  —  i.e.,  logics  whose  systems  of  Sequent  Calculi  do  not  admit 
the  Contraction  rule. 

Contraction: 

h  t,a,a 

h  r,A 

It  is  well  known  that  a  Sequent  Calculus  for  first  order  logic  without  the  Contraction 
rule  formalizes  a  decidable  fragment,  called  Direct  Logic  in  Ketonen  and  Weyhrauch 
[1984].  A  decision  procedure  is  simply  the  application  of  the  rules  of  Sequent 
Calculus  in  inverse  order  (Wang  algorithm ,  see  Wang  [i960]).  Such  a  method 
was  presented  first  by  Oiva  Ketonen  in  his  thesis  [1944]).  In  the  absence  of  the 
Contraction  rule,  for  each  essentially  existential  quantifier2  we  are  allowed  to  try 
only  one  substitution,  and  the  search  procedure  soon  reduces  to  the  propositional 
case. 

2  A  quantifier  and  its  bound  variable  are  essentially  universal  if  they  are  universal 
in  a  positive  context  or  existential  in  a  negative  context;  otherwise,  they  are  essentially 
existential. 
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The  original  motivation  for  Ketonen  and  Weyhrauch  [1984]  was  to  provide  a 
less  bureaucratic,  more  natural  procedure  than  the  Wang  algorithm  and  to  imple¬ 
ment  it  in  the  LISP-based  Proof  Checker  EKL. 

“The  very  locality  of  the  rules  of  sequent  calculus  forces  us  to  neglect  the 
global  ‘leitmotifs’  of  proofs.  For  example,  the  mechanical  application  of 
inverted  two-premise  rules  not  only  duplicates  the  work  to  be  done  in  every 
succeeding  step  but  may  also  be  unnecessary.  The  ‘globed  picture’,  i.e., 
the  natural  order  of  application  of  inference  rules,  cannot  be  deciphered 
through  the  application  of  this  kind  of  formalism.  The  problems  presented 
by  the  classical  resolution  approach  axe  similar:  again  we  are  faced  with 
the  necessity  of  a  global,  conjunctive  normal  form,  a  transformation  that 
erases  the  local  connections  used  in  natural  proof  generation.”  (J. Ketonen, 
manuscript) 

By  allowing  global  consideration  of  the  data,  a  method  is  designed  that  splits  the 
current  data  into  two  independent  parts  at  each  application  of  an  inverted  two- 
premise  rule.  For  instance,  in  the  Wang  algorithm  we  invert  a  rule  for  conjunction 
of  the  form 

Additive  Conjunction: 

\-T,A  \-T,B 

f-  T,  A  A  B 

while  the  method  of  Ketonen  and  Weyhrauch  allows  us  to  invert  a  rule  of  the  form 

Multiplicative  Conjunction: 

(-r,A  \-B,  A 

hr,  A  A  5,  A 

The  method  is  essentially  a  search  for  adequate  pairings  of  negative  and  positive 
occurrences  of  atomic  formulas,  corresponding  to  the  axioms  of  a  derivation.  The 
condition  for  adequacy  must  consider  the  global  connections  determined  by  the 
atomic  pairings  ( atom  links),  and  by  the  formulas  corresponding  to  conclusions 
of  two-premise  rules  ( two-premise  links).  The  key  notion  here  is  that  of  a  chain,  a 
data-structure  determined  by  the  alternation  of  these  two  kinds  of  connections.  The 
main  requirement  is  that  no  such  chain  may  be  cyclic  (see  section  5.1).  Using  the 
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Cut  Elimination  theorem  for  Sequent  Calculus  and  the  absence  of  Contraction,  we 
may  work  with  the  subformulas  of  the  given  set  of  formulas,  each  subformula  being 
considered  just  once.  These  data  have  a  natural  representation  as  LISP  structures. 
Ideas  of  Andrews  [1981]  and  of  others  are  used  or  independently  rediscovered 
here.  (Another  analysis  of  Contraction-free  logics  can  be  found,  e.g.,  in  H.  Ono 
and  Y.  Komori  [1985].)  The  main  theorem  claims  that  success  in  the  search  is 
equivalent  to  provability  in  the  Sequent  Calculus  for  first  order  Direct  logic.  A 
proof  for  the  propositional  case  can  be  found  in  sections  (8.3)-(8.8)  below. 

It  is  significant  that  irrelevance  in  this  context  represents  a  practical  problem 

—  how  to  detect  it  and  how  to  reduce  the  scope  of  the  search  efficiently  —  rather 

than  a  theoretical  evil  that  knocks  the  search  off  as  soon  as  its  uneliminable  presence 

is  detected.  However,  in  first  order  logic  the  claim  holds  for  prenex  formulas  only. 

In  fact,  Herbrand’s  Theorem  is  used  in  Ketonen  and  Weyhrauch  [1984]  to  reduce 

the  first  order  case  to  the  propositional  case.  But  Herbrand’s  Theorem  fails  for 

non-prenex  formulas,  as  shown  by  the  following  counterexample.  If  B  does  not 

contain  x  free,  then  (Vi.(A(x)  A  B))  D  (Vy.A(y))  A  B  does  not  hold  in  Direct  Logic 

but  the  Herbrand  expansion  A(y)  A  B  D  A( y)  A  B  holds  in  Direct  Logic.  A  proof 

procedure  may  use  classical  logic  to  transform  formulas  into  prenex  normal  form 

in  classical  logic  and  then  apply  the  technique  of  Ketonen  and  Weyhrauch  [1984], 
/ 

Such  a  procedure  violates  the  main  motivations  for  Direct  Logic  presented  above; 
in  fact  the  transformation  of  formulas  into  prenex  form  alters  the  correspondence 
between  the  formal  syntax  and  the  intuitive  meaning  and  therefore  destroys  the 
‘natural  order  of  application  of  the  inference  rules’  implicit  in  the  original  form 
of  the  formulas.  It  is  therefore  fair  to  say  that  Direct  Logic  remains  an  unfinished 
project.  The  full  first  order  case  can  now  be  obtained  using  ideas  from  Linear  Logic, 
as  discussed  below. 

Linear  Logic.  Girard  [1987b]  suggests  that  a  major  motivation  for  Linear  Logic 
comes  from  the  theory  of  models  for  Lambda  Calculus  and  presents  the  evolution 
from  Scott 's  domains  to  qualitative  domains  and  to  coherent  spaces  as  its  appropriate 
genealogy.  It  is  interesting  to  note  that  although  coherent  spaces  provide  a  Heyting- 
style  interpretation  for  Linear  Logic,  the  interpretation  is  not  faithful.  In  Linear- 
Logic  there  are  constants  1,  J_,  T  and  0;  regarded  as  propositions,  ±  ^  1  and 
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0  ^  T,  while  regarded  as  coherent  spaces,  _L  =  1  and  0  =  T.  In  fact  all  other 
techniques  presented  in  the  paper  are  readable  in  an  interesting  way  from  the  point 
of  view  of  proof  theory  alone.  Here  we  will  try  to  motivate  the  laws  of  Linear  Logic 
starting  from  the  Sequent  Calculus  presented  in  Girard  [1987b].  The  rules  of  the 
calculus  are  listed  in  section  (2.1). 

The  main  idea  is  the  introduction  of  an  operator  T  (with  dual  *?’).  The 
fragment  without  these  operators  is  free  from  irrelevance  and  accountable  with 
respect  to  resources,  while  in  the  full  system  this  kind  of  information  may  be  lost. 

The  operator  !  has  the  same  rules  as  the  □  operator  in  the  modal  system  S4, 
namely 

!  Rule:  Dereliction: 

h  \-r,A 

h ?Ci,...,?cm,u  hr ,?a  . 

In  addition,  Weakening  and  Contraction  are  allowed  for  formulas  of  the  form  ?J5. 

Stronger  operations,  the  linear  implication  —o  and  the  involutory  linear  nega¬ 
tion  (,)x,  are  introduced.  Classical  or  intuitionistic  implication  A  D  B  is  represented 
as  \A  ~o  B  and  classical  negation  ~<A  is  represented  as  (!A)X.  In  the  tradition  of 
Hey  ting’s  semantics,  the  constructive  meaning  of  A  D  B  is  a  method  that  trans¬ 
forms  a  proof  of  A  into  a  proof  of  B.  The  constructive  meaning  of  A  — o  B  is  a 
method  that  uses  a  proof  of  A  exactly  once  in  producing  a  proof  of  B. 

The  distinction  is  made  between  additive  and  multiplicative  conjunctions  and 
disjunctions,  a  restatement  of  the  distinction  between  ex tensional  and  intensional 
connectives  in  Relevance  Logic.  To  guarantee  duality  between  conjunction  and 
disjunction  we  must  have 

Additive  Disjunction 

kt,  a  hr,£ 

i-r,Av£  hr,  a  vs 

and 

Multiplicative  Disjunction 

h  r,  a,b 


h  r,A  vb 
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In  conclusion,  the  language  of  Linear  Logic  contains  the  logical  symbols  in  the 
following  table. 

Linear  Negation:  (.)J_ 

Multiplicatives: 

Conjunction:  ®  (times)  Disjunction:  LI  (par) 

with  identity  1  with  identity  _L 

Additives: 

Conjunction:  n  (with)  Disjunction:  ®  (plus) 

with  identity  T  with  identity  0 

Quantifiers: 

f\  x  (for  all  x)  \/  x  (there  exists  x) 

Exponentials: 

!  (of  course!)  ?  (why  not?) 


Linear  Logic  can  be  Commutative  or  Noncommutative ,  depending  on  the  validity 
or  not  of  the  axioms 

A®  B  =  B  g>  A,  AU5  =  BUA,  B  o-  A  =  A  -o  B. 

In  Noncommutative  Linear  Logic  formulas  of  the  form  L  and  ?A  commute  with 
everything. 

Translations  into  Linear  Logic. 

Intuitionistic  and  classical  logic  have  standard  translations  (.)°  and  (.)+  into 
Linear  Logic  (see  Girard  [1987b]),  presented  in  the  table  below.  The  fundamental 
asymmetry  between  assumptions  and  conclusions  in  intuitionistic  logic  is  repre¬ 
sented  by  the  asymmetry  of  the  exponentials  !  and  ?. 
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A  combinatorial  motivation  for  the  translation  (.)+  of  Classical  Logic  can  be 
suggested  through  the  following  application  of  the  Cut  rule  in  classical  Sequent 
Calculus: 

Si:  rhA  ,A,A  S3:  A.  A,  II  b  A 

s2:  F  b  A,  A  S4:  A,  II  b  A 

s5:  r,nbA,A 

A  standard  reduction  step  in  the  Cut  elimination  procedure  involves  cross- cutting: 

(1)  consider  a  Cut  with  premises  Si  and  S4  and  apply  the  cut  elimination  procedure 
to  obtain  S':  F,  II  b  A,  A,  A; 

(2)  consider  a  Cut  with  premises  S2  and  S3  and  apply  the  cut  elimination  procedure 
to  S":  A,T,n  b  A,  A; 

(3)  apply  Cut  to  S'  and  S",  yielding  T,  T,  11,11  b  A,  A,  A,  A; 

(4)  apply  Contraction  several  times  to  obtain  S5. 

Clearly  this  procedure  is  not  ecological  and  produces  a  combinatorial  explosion 
of  the  data,  since  Contraction  is  repeatedly  applied  —  in  steps  (1),  (2)  and  (4). 
Consider  the  following  classical  derivation: 

b  P^P  b  Q^Q  b  -,P,P  b  iQ,Q 

b  p,-.p  bP,-PA-g,g  b-p,p  b-p,PA-g,g 

b  -.p  a-.q,iP aq,p,p  b  -p,-p,p  a-q,p  aq 

b  ip  A^g,iP  aq,p _ b  -.p,  p  a  -g,  p  a  q 

b-PA(?,-PA-Q,PA-Q,PA(? 

This  clearly  fails  in  Linear  Logic  without  ?  and  !.  Since  in  the  full  language  we  have 
Contraction  only  for  formulas  of  the  form  IB,  the  above  proof  will  be  representable 
in  Linear  Logic  only  if  the  cut  formula  is  ?!P.  In  this  representation  the  formulas 
responsible  for  combinatorial  explosions  in  the  normalization  procedure  are  readily 
identified. 
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Translation  of  Intuitionistic  Logic : 

(P)°  =  P,  for  P  atomic; 

(A  AB)°  -  A0  nP°,  (A  V  B)°  =  \A°  ©  !P° 
(.4  D  P)°  =  (!A°)  -o  B° ,  (-'A)0  =  (!A° )  — o  0 

(Vx. A)0  =  /\i.A°,  (3i.A)°  = 

Translation  of  Classical  Logic: 

(P)+  =  ?!P,  for  P  atomic; 

(A  V  P)+ =  A+ U  P+,  (~'A)+  =  ?A+X 

(Vx.A)+  =  ?!/\  x.A+. 


1.1.2.  Sequent  Calculus  and  Natural  Deduction  for  Linear  Logic. 

Multiple  Conclusion  Natural  Deduction  for  Linear  Logic.  We  reconsider  the 
issue  of  Sequent  Calculus  and  Natural  Deduction  in  the  context  of  Linear  Logic.  The 
question  is:  Can  a  satisfactory  form  of  Multiple  Conclusion  Natural  Deduction  be 
provided  for  Linear  Logic ?  We  claim  that  the  answer  is  provided  by  a  reformulation 
of  the  system  of  proof  nets  introduced  for  the  multiplicative  fragment  in  Girard 
[1987b] .  We  simplify  that  system,  extend  it  to  the  additive  fragment  and  describe 
a  possible  extension  to  the  whole  system. 

We  consider  first  some  differences  between  Sequent  Calculus  and  Natural  De¬ 
duction.  In  Natural  Deduction 

(1)  assumptions  can  be  made  and  sets  of  assumptions  discharged  or  closed ,  and  an 
inferential  step  consists  of  making  an  assertion  ( conclusion )  on  the  basis  of  some 
assertions  (premises)  previously  made; 

(2)  the  determination  of  which  assumptions  are  open  or  closed  at  each  inferential 
step  is  in  accordance  with  general  deduction  rules  or  depends  on  ad  hoc  specifica¬ 
tions; 
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(3)  some  inferential  steps  introduce  a  statement  which  is  more  complex  than  the 
premises  ( introduction  rules)  and  other  steps  use  a  complex  statement  to  infer  a 
simpler  one  ( elimination  rules). 

A  Sequent  Calculus  derivation  represents  an  informal  argument  as  follows: 

(1)  axiom  sequents  are  taken  as  unanalyzed  inferences  and  a  sequent  may  be  inferred 
from  other  sequents; 

(2)  special  structural  rules  of  the  calculus  are  used  for  the  administration  of  the 
expressions  in  the  antecedent  and  in  the  consequent; 

(3)  if  a  sequent  S  is  inferred  from  other  sequents  St ,  the  expressions  in  S,  are  either 
the  same  as  or  subexpressions  of  the  expressions  in  5. 

Right  only,  Introduction  only  Systems.  The  same  principle  of  duality  (Inver¬ 
sion  Principle)  that  governs  the  relations  between  introduction  and  elimination  rules 
in  Natural  Deduction  and  between  Right  and  Left  rules  in  Sequent  Calculus  holds 
between  the  Right  rules  of  dual  connectives  or  quantifiers  in  the  Sequent  Calculus 
for  Linear  Logic.  Thus  notational  economy  is  achieved  —  at  the  expense  of  some 
intuitive  discomfort  —  by  working  with  sequents  consisting  only  of  the  succedent 
part  in  a  calculus  containing  only  Right  rules  (see  section  2.1).  Similarly,  we  may 
have  a  Natural  Deduction  with  only  introduction  rules,  with  multiple  conclusion 
axiom  links  of  the  form 

P,W. 

In  these  formalisms,  the  open  assumptions  of  an  intuitive  argument  will  therefore 
appear  as  negated  conclusions.  In  conclusion,  in  a  Multiple  Conclusion  Natural 
Deduction  system  the  premises  of  each  link  are  subformulas  of  the  conclusion,  and 
difference  (3)  between  the  calculi  disappears. 

Closure  of  open  assumptions.  The  rules  of  Gentzen-Prawitz’s  Natural  Deduc¬ 
tion  related  to  the  closure  of  open  assumptions  are  D-introduction,  V-elimination, 
3-elimination,  and  the  rule  corresponding  to  double  negation  elimination.  Now  U- 
elimination  is  represented  by  a  <g)-link,  0-elimination  by  a  n -link,  and  V'e^mina^on 
by  a  /\-lmk.  Since  (.)x  is  involutory,  we  may  let  Axx  be  A  by  definition.  It  would 
be  natural  to  regard  the  — o -link  as  a  two- premise  rule,  the  second  premise  being 
the  unique  assumption  discharged  at  the  inference.  Further  notational  economy 
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is  achieved  by  regarding  — o  as  defined,  thus  a  -o-link  with  conclusion  A  — o  B  is 
represented  by  the  U-link: 

Ax  B 
A±UB 


In  conclusion,  the  mechanism  for  discharging  assumptions  becomes  unnecessary 
—  or  perhaps  we  should  say  it  is  disguised  under  the  ®-,  n-  and  U-links  —  and 
difference  (1)  between  the  formalisms  is  obliterated.  However,  we  should  not  be 
surprised  that  the  distinction  between  open  and  closed  assumptions  still  plays  a 
role  in  the  Multiple  Conclusion  Natural  Deduction  System,  as  we  will  discover 
when  considering  the  doors  of  an  empire  (see  section  3.4). 


Structural  Rules  for  Natural  Deduction?  Finally,  it  would  seem  that  struc¬ 
tural  rules  should  explicitly  belong  to  a  Natural  Deduction  formulation  of  Linear 
Logic.  We  will  provide  a  formulation  of  Proof- Structures  for  Linear  Logic  which 
contains  some  explicit  forms  of  structural  rules  (see  section  3)  and  is  therefore  sim¬ 
ilar  to  Sequent  Calculus  with  respect  to  (3).  However  we  must  be  careful,  since 
structural  rules  are  a  major  obstacle  to  the  uniqueness  of  the  normal  form. 

We  focus  on  the  multiplicative  and  additive  fragment  MALL.  In  the  Sequent 
Calculus  for  MALL,  Weakening  is  admitted  only  to  introduce  the  propositional 


constant  _L 


L-Rule: 


b  r 
n\± 


and  in  the  axiom  for  T 


HT,r. 


Contraction  is  implicit  in  the  rule  for  11: 

(1-Rule: 

nr.  a  tr,B 
h  r, a nB 


A  possible  translation  of  this  rule  into  Natural  Deduction  is  the  introduction  of  the 
inferential  links  -AAr~g-  and  a  sequence  of  Contraction  links  C  qC  for  each  C  occur¬ 
ring  in  T  ( hidden  contractions).  The  use  of  Contraction  links  must  be  restricted, 
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and  each  proof-structure  S  is  equipped  with  a  flagging  function  <p  that  associates 
each  Contraction  link  with  a  fl  link. 

We  suspect  that  the  only  plausible  solution  to  the  problem  of  translating  Weak¬ 
ening  is  the  introduction  of  its  principal  formulas  among  the  axioms.  This  is  Girard’s 
formulation  in  the  case  of  T.  Nothing  is  lost  if  _L  is  introduced  in  any  axiom  of 
the  derivation  above  b  T,  rather  than  by  the  _L  Rule,  unless  a  special  meaning  is 
attributed  to  the  fact  that  an  axiom  link  P,  P1-  consists  of  two  occurrences.  In  this 
case  the  Weakening  rule  in  general  becomes 

>-r,i 

b  r,?A 

Finally,  the  rule  of  Cut  is  represented  by  a  cut  link.  This  is  an  instance  of  a  ®- 
introduction  with  a  conclusion  of  the  form  A®  A-1.  However,  such  a  A®  A1-  cannot 
be  a  premise  of  another  link  and  is  not  regarded  as  a  conclusion  of  the  deduction. 
For  this  reason  we  underline  A®  A-1 ,  when  it  is  regarded  as  conclusion  of  a  cut.  We 
want  to  emphasize  the  following  point:  with  respect  to  the  internal  connections  in 
a  deduction,  a  Cut  link  is  exactly  the  same  as  a  ®-link.  However,  in  the  external 
consideration  of  a  derivation  as  yielding  certain  conclusions,  an  underlined  formula- 
occurrence  must  be  regarded  as  a  local  and  temporary  contradiction,  that  does  not 
belong  to  the  conclusions  of  the  derivation. 

Cut: 

A _ A±_ 

A®AL 


Families  of  Quasi-Structures.  However,  the  hidden  Contraction  is  damaging  for 
the  uniqueness  of  the  normal  form,  since  it  allows  the  permutation  of  the  order  of 
inferences  n/®,  as  shown  in 

bC,r,A  i-c,r,B 

b  A,D  bC,rjnB 


\-  A,D®C,r,AnB 
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and  in 

hA,D  bC,I\A  hA,D  hC,r,B 

hA,D®C,r,A _ t~  A,D®  CJVB 

~  I-  A,£)®C,r,.4nB 

An  idea  for  the  elimination  of  the  hidden  contraction  rule  is  the  theory  of  'slices' 
suggested  in  chapter  6  of  Girard  [1987b],  pp. 93-97: 

“The  slicing  is  the  ‘development’  of  a  proof-net  by  ‘distributivity’.  Each 
slice  is  itself  logically  incorrect,  but  it  is  expected  that  the  total  family  of 
slices  has  a  logical  meaning.  However,  there  is  no  characterization  of  the 
set  of  slices  which  are  the  slices  of  a  proof-net.  Moreover,  we  do  not  even 
know  whether  or  not  identifying  proof-nets  with  the  same  slices  could  lead 
to  logical  atrocities...”  (Remark  6.3.(i),  page  95) 

In  section  (6.1)  we  develop  this  notion.  We  define  Families  of  Quasi-Structures  for 
Linear  Logic  and  we  show  that  no  logical  atrocity  results  if  we  consider  a  slicing  as 
a  set  of  embeddings  of  a  family  of  quasi-structures  into  a  given  proof-structure.  The 
families  of  quasi-structures  representing  valid  proofs  will  be  called  Proof  Networks. 
In  section  (6.3)  we  prove  an  Equivalence  Theorem  between  Proof-Nets  and  Proof- 
Networks.  As  a  Corollary,  two  derivations  that  differ  only  for  a  permutation  of 
inferences  n/®  are  projected  into  the  same  proof- network.  This  solves  the  problem 
of  the  uniqueness  of  the  normal  form,  at  least  for  this  fragment  of  Linear  Logic. 

Global  vs.  Local  verification;  Natural  Deduction  in  Sequent-like  nota¬ 
tion.  From  the  analysis  summarized  above  it  appears  that  the  maun  difference 
between  the  Multiple  Conclusion  Natural  Deduction  and  the  Sequent  Calculus  for 
Linear  Logic  is  the  global  versus  local  character  of  the  verification  of  correctness  of 
each  inferential  step,  as  described  in  section  (1.1),  fact  (1).  This  point  deserves  a 
more  detailed  discussion. 

The  verification  of  correctness  in  Gentzen-Prawitz’s  Natural  Deduction  may 
depend  on  global  conditions;  still,  we  can  define  a  (rather  bureaucratic)  system  of 
accounting  of  the  open  assumptions  so  that  the  necessary  information  is  available 
at  each  step  of  the  inductive  construction  a  derivation.  Such  a  system,  the  sequent 
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formulation  of  Natural  Deduction ,  was  introduced  in  Gentzen  [1936].  We  may 
write 

Assumptions: 


(A)  I- .4 


D  —Introduction 

(r,A)hg 
(r)  h  A  D  B 

V  —  Introduction 

(T)  H  A(a) 

(r)  h  Vx.a(i) 

where  a  does  not  occur  free  in  T, 

Weakening 

(r)  h  b 

(T,A)  h  B 


D  —Elimination 

(F)  A  D  B  (A)  h  A 
(r,A)hB 

V  —  Elimination 

(n  h  vx.a 
(r)  k  A(t) 


Contraction 

(r,  A,  A)  B 
(r,A)h5  . 


This  is  still  a  Natural  Deduction  system  (for  a  fragment  of  intuitionistic  logic), 
where  the  expressions  in  parentheses  on  the  left  of  h  are  only  annotations  and  the 
verification  of  correctness  for  the  V-rule  is  still  global.  In  particular,  if 

(A)hA 

T>i  T>2 

(A)  h  A  (T,A)\~B 


are  derivations  and 

Vx 

(A)  h  A 

V2 

(r,A)  h  b 

results  from  V\  and  V2  by  substitution,  then  the  annotations  have  to  be  changed 
and  A  is  replaced  by  A  throughout  V2.  In  other  words,  the  administration  of  the 
general  context  cannot  be  dealt  with  locally. 


Girard’s  System  of  Proof-Nets.  Girard  gives  a  condition  to  distinguish  the  proof 
structures  in  the  multiplicative  fragment  without  constants  that  represent  correct 


Section  1 


21 


derivations  (Proof- Nets)  from  those  which  do  not.  This  condition  results  from  cer¬ 
tain  searches  through  a  proof  structure  and  requires  that  all  possible  searches  should 
cross  all  formulas  in  the  structure  in  two  different  directions  before  returning  to  the 
starting  point  in  the  same  direction  ( no-short-tnp  condition ,  see  Giraxd  [1987b], 

2.4.,  page  33).  However,  in  the  proof  of  the  S equentialization  Theorem ,  which  al¬ 
lows  recovery  of  a  sequent  derivation  corresponding  to  a  given  proof-net,  the  main 
notion  is  that  ot  empire ,  which  is  defined  there  in  terms  of  the  search  procedure  (see 
Girard  [1987b],  2.9.3.,  p.  37;  see  also  section  (3.4)  below.  The  role  of  the  notion 
of  empire  is  even  more  obvious  in  the  alternative  proof  sketched  in  Girard  [  1987c] , 

11.1.,  remark  2).  Therefore  it  seems  natural  that  Girard’s  result  can  be  simplified 
if  empires  are  defined  directly  rather  than  in  terms  of  all  possible  searches  across  a 
structure. 

1.1.3.  A  Review  of  Results. 

The  main  subsystems  of  Linear  Logic  under  consideration  cue  MLL  ( Multi¬ 
plicative  Linear  Logic )  and  MALL  ( Multiplicative  and  Additive  Linear  Logic),  in 
their  propositional  and  first  order  versions.  NCMLL  and  NCMALL  Eire  the  re¬ 
spective  Non  Commutative  versions. 

Proof-Structures.  Proof- Structure  sue  defined  in  section  (3)  as  sets  of 
formula- occurrences  satisfying  certain  relations,  the  links.  In  sections  (3.1)  and 
(3.2)  we  define  a  subclass  of  such  graphs,  the  inductively  defined  proof-structures, 
together  with  a  list  of  conclusions,  the  lowermost  formula-occurrences  in  the  graph. 
The  inductive  definition  starts  with  a  proof-structure  consisting  of  an  axiom  link  and 
then  adds  new  links  between  the  conclusions  of  already  defined  proof-structures.  In 
the  inductive  definition  of  a  proof-structure  for  propositional  MALL  the  following 
restrictions  are  introduced: 

(i)  a  ®-link  can  be  introduced  only  if  A  and  B  are  conclusions  of  different 

proof  structures  <S]  and  S? .  where  <Si  and  S2  share  no  formula-occurrence. 

(ii)  a  U-link  can  be  introduced  only  if  A  and  B  belong  to  the  same  proof- 

structure. 

(iii)  a  n-link  *  n  &  can  be  introduced  only  if  A  and  B  belong  to  different  proof 
structures  S 1  with  conclusion  C\, . . .  ,Cn,A  and  S2  with  conclusion  C\, . . .  ,Cn,B 
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such  that  S i  and  <f>2  share  no  formula-occurrence  and  for  all  i  <  n  a  contraction 
link  C'  is  also  introduced. 

We  will  see  below  (sections  3.6,  3.7)  that  all  inductively  defined  proof- structures 
are  proof-nets  and  naturally  correspond  to  sequent  derivations.  This  is  hardly  a 
surprise,  since  the  inductive  definition  of  the  proof-structure  already  guarantees  the 
conditions  on  the  context  that  in  Sequent  Calculus  are  checked  through  the  passive 
formulas  of  the  sequent. 

Thus  the  nontrivial  task  is  to  provide  (algebraic  or  geometric)  conditions  that 
allow  us  to  recognize  whether  a  given  proof-structure  can  be  generated  inductively. 
Moreover,  such  conditions  should  be  relatively  simple  when  compared  to  the  formal¬ 
ism  of  sequent  calculus  and  its  allegedly  excessive  ‘bureaucracy’.  We  believe  that  a 
concise  system  of  annotations  for  proof-nets  can  be  given,  and  that  the  restrictions 
introduced  by  such  annotations  can  be  intuitively  justified  —  see  sections  (1.1.5) 
and  (4.7). 

Empires  and  Relevance.  The  crucial  notion  of  the  empire  e(A)  of  a  formula- 
occurrence  A  in  a  proof-structure  S  is  inductively  defined  in  section  (3.4).  Member¬ 
ship  in  e(A)  propagates  to  the  subformulas  and  through  axiom  links.  We  know  from 
Girard  [1987b],  (see  facts  2.9.4.  p.37)  that  if  A  is  a  formula  occurrence  different 
from  B  and  C,  we  have  two  cases: 

(1)  if  B  £  e(A)  then  B  ®  X  or  X  ®  B  £  e(A),  for  all  X\ 

(2)  if  B  £  e(A)  and  C  £  e(A)  then  B  U  C  £  e(A). 

To  extend  this  approach  to  the  additives  we  must  take 

(1)  if  B  £  e(A)  then  B  ©  X  or  X  ©  B  €  e(A),  for  all  X\ 

(2)  if  B  £  e(A)  and  C  £  e(.4)  then  BnC£  e(.4). 

The  empire  of  A  in  S  can  be  described  as  the  substructure  of  S  which  is  deductively 
relevant  to  A. 

The  lowermost  formula-occurrences  in  e(A)  are  called  the  doors  of  e(A).  These 
are  either  A  itself  ( main  door )  or  conclusions  of  <S  ( fake  doors)  or  premises  D  of  a 

rj  x-*  rj  r\l  __ 

link  C~D  ,  CrD  or  of  a  contraction-link  -^77-  such  that  C  and  D'  do  not  belong 
to  e(A)  ( side  doors).  It  would  be  perhaps  more  instructive  to  speak  of  open  and 
closed  doors  rather  than  fake  and  side  doors.  Finally,  a  conclusion  of  a  Cut  link  may 


Section  1 


23 


be  called  a  ghost  door,  one  that  can  never  be  used  as  a  door  and  may  be  removed 
altogether. 

Proof-Nets.  The  conditions  characterizing  propositional  proof-nets  given  in  sec¬ 
tion  (3.5)  are: 

(i)  for  all  conclusions  A®  B  of  a  <g>-link  in  B  e(A )  and  A  $  e(f?)  ( absence  of 

vicious  circles ); 

(ii)  for  all  conclusions  A  U  B  of  a  U-link  in  and  for  all  pairs  A,  B  of  conclusions 
of  S,  A  €  e(B)  and  B  €  e(A)  ( connectedness ); 

(iii)  for  all  conclusions  A  n  B  of  a  IH-link  in  5^,,  there  is  no  open  door  of  e(A)  nor  of 
e(B)  and  the  closed  doors  of  e(j4)  and  of  e(£)  are  all  premises  of  contraction  links 
associated  with  the  fl-link  in  question  by  the  function  ip.  ( enclosure  m  a  ‘box’). 

By  the  Box  condition,  if  a  Contraction  link 

D'  D" 

D  ’ 


is  associated  with 

A  B 
AUB ’ 

then  D'  is  a  door  of  e(A)  and  D"  is  a  door  of  e(B),  and  all  the  side  doors  of  e(A) 
and  e(£)  are  of  this  form. 

For  first-order  proof-nets  we  need  an  additional  condition,  adapted  from  Girard 
[1987c],  Given  a  link  1  variable  a  is  called  an  eigenvariable  or  a  param¬ 

eter.  We  assume  that  every  eigenvariable  is  associated  with  a  unique  /(-link.  We 
define  a  relation  a  <°  b  between  eigenvariables  as  follows.  If  a  is  associated  with 
Rz^a(x)  1  *ben  we  let  a  <°  b  if  b  occurs  inside  and  outside  e(A(a)).  Let  <t  be  the 
transitive  closure  of  <°.  The  additional  condition  for  first  order  proof-nets  is: 

(iv)  the  relation  <t  is  a  strict  partial  ordering  ( parameters  condition). 

Structure  Theorem  and  Sequentialization  Theorem.  It  is  easy  to  see  that 
all  inductively  defined  proof  structures  satisfy  these  conditions  (section  3.6).  It  is 
easy  to  define  a  mapping  7r  from  Sequent  Calculus  derivations  to  proof-structures 
and  it  is  also  easy  to  show  that  the  image  of  any  it  is  inductively  defined  ( Structure 
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Theorem).  This  proves  that  n  is  a  (many-to-one)  mapping  into  the  set  of  proof-nets 
(section  4). 

To  show  that  n  is  onto  ( Sequentialization  Theorem),  we  need  some  additional 
facts  about  empires.  Searches  through  empires  are  formalized  as  trees  (section  4.1), 
a  simple  instance  of  a  general  notion  of  inductive  search  extensively  studied  by 
Feferman  [1982].  The  main  result  ( Tiling  Lemma,  section  4.3)  is  that  for  all  A.B 
in  S  the  only  cases  besides  e(A)  fl  e(B)  =  0  and  e(A)  =  e(B)  axe: 

(i)  A  €  e(B)  and  B  e(A)  (notation:  AC.B),  which  implies  e(A)  C  e{B)\ 

(ii)  A  £  e(B )  and  B  €  e(A)  (notation:  BdA),  which  implies  e(B )  C  e(A); 

(iii)  A  €  e(B)  and  B  €  e(A)  (notation:  A()B). 

Another  significant  use  of  the  notion  of  empire  is  the  Substructure  Theorem: 
for  all  A,  e(A)  is  a  substructure  of  S  which  is  also  a  proof-net. 

With  this  preparation,  the  proof  of  the  Sequentialization  Theorem  for  MLL 
follows  the  ‘alternative  proof’  in  Girard  [1987c]  II. 1.,  remark  2  (section  4.4.1). 
The  difficult  case  in  the  argument  is  that  of  a  proof-net  S  in  which  all  conclusions 
have  the  form  A{  0  B{,  for  i  <  n.  For  such  an  5  we  need  to  find  a  j  <  n  such 
that  z{Aj)  U  e(-Bj)  U  {A}  0  Bj}  is  S.  We  argue  that  if  A\  0  B\  does  not  have  this 
property,  then  there  must  be  a  side  door  D  of  e(A\ )  and  a  conclusion  A,  0  Bt  such 
that  D  is  a  subformula  of  A,  0  Bt,  say  of  A,.  Since  the  empire  of  a  formula  A' 
contains  the  subformulas  of  X,  we  have  e{A\)  fl  e(Ai)  ^  0  and  A,  £  e(Ai),  thus 
e(Ai)  C  e(Ai).  Also  we  can  show  that  z(B\)  £  e(Ai).  We  proceed  in  this  way  until 
we  find  an  Aj  0  Bj  where  e(A;  )  or  e(Bj)  is  maximal  with  respect  to  £  . 

In  the  case  of  MALL  we  define  a  relation  *<’  between  formula-occurrences  of 
the  form  A  n  B  by  setting  A'  I~1  B'  <J  A  n  B  if  A!  n  B'  occurs  in  e(A)  or  in  e(B).  We 
show  that  <  is  a  strict  partial  ordering  (section  4.5). 

For  the  first  order  case  Girard  [1987c]  presents  a  condition  on  all  possible 
searches  through  a  proof-structure  and  derives  the  parameters  condition  from  it  by 
a  difficult  argument.  In  our  exposition  we  achieve  a  drastic  simplification;  in  order 
to  prove  the  Sequentialization  Theorem  we  need  only  the  following  easy  fact.  Let 
a,  b  be  eigenvariables,  where  a  is  associated  with  Vx.A(i).  If  b  =  a  or  b  <t  a  in  a 
proof-net,  then  b  occurs  only  inside  e(A(a))  (see  the  proposition  in  section  4.6). 
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Chains  and  Cycles.  A  direct  analysis  of  empires  does  not  seem  to  lead  to  an 
elegant  proof  of  the  Cut-elimination  Theorem.  It  is  convenient  to  use  in  this  context 
the  notions  of  a  path,  a  chain  and  a  cycle  introduced  by  Ketonen  and  Weyhrauch 
[1984]  (see  section  5.1).  Given  a  set  of  formula-occurrences  T,  a  proof-structure 
is  completely  determined  by  a  set  of  axiom  links  between  their  (atomic)  formulas 
is  established  —  the  proof-structure  containing  all  the  subformulas  of  T  with  the 
specified  axiom  links.  A  path  for  T  is  simply  a  set  of  axiom  links  satisfying  certain 
conditions  and  a  chain  is  a  global  connection,  determined  by  the  axiom-links  and 
the  subformulas  of  the  form  A®B.  If  we  assume  the  connectedness  condition ,  then 
the  absence  of  cycles  in  the  sense  of  Ketonen  and  Weyhrauch  [1984],  namely,  of 
cyclic  chains,  is  equivalent  to  the  absence  of  vicious  circles.  By  this  method  the 
Strong  Normalization  Theorem  for  MLL  is  easily  proved. 

Families  of  Quasi-Structures  and  Uniqueness  of  Normal  Form.  However, 
we  aim  at  a  Strong  Normalization  Theorem  for  MALL  together  with  the  uniqueness 
of  the  normal  form.  Our  discussion  in  section  (1.1.2)  shows  that  uniqueness  of  the 
normal  form  is  impossible  unless  we  neutralize  the  hidden  contractions  of  the  n* 
rule.  As  pointed  out  above,  this  can  be  achieved  through  the  notion  of  a  family 
of  quasi- structure  together  with  their  embeddings  into  the  given  proof-structure. 
In  a  quasi-structure,  n  links  are  unary  and  there  are  no  Contraction  links.  An 
embedding  of  quasi-structures  into  a  proof-structure  must  preserve  the  links  ( modulo 
the  iterations  of  formula-occurrences  in  the  Contraction  links  of  a  proof-structure). 
A  family  of  quasi- structures  Fam  Sr  associated  with  a  given  proof-structure  Sv  is 
the  set  of  its  maximal  subsets  (in  a  suitable  sense)  that  are  quasi-structures,  (see 
section  6).  We  may  regard  structures  as  a  category  Struct,  containing  both  proof- 
structures  and  quasi-structures  as  objects,  with  embeddings  as  morphisms.  Then 
the  operation  “ connect  two  disjoint  proof- structures  with  a  <gt-Iink"  is  a  functor 
(Times)  <g>  :  Struct*  x  Struct*  — >  Struct*,  where  Struct*  is  the  category  of 
Structures  with  a  selected  conclusion. 

An  interesting  result  is  the  generalization  of  the  notion  of  empire  (section  6.2). 
For  each  A  in  a  given  proof  structure,  the  set  of  embeddings  in  question  induces  an 
equivalence  class  [A]  of  formula-occurrences  in  the  corresponding  family  of  quasi- 
structures.  Wre  say  that  the  equivalence  class  \B\  belongs  to  the  empire  of  an 
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equivalence  class  [A]  (notation:  [B\  £  e[A]),  if  for  all  Q  such  that  a  representative 
Ba  of  [f?]  occurs  in  Q ,  there  is  a  representative  Ac  of  [A]  in  Q  and  Ba  £  e(Ac ). 

The  propositional  conditions  characterizing  a  proof-network  T  —  Fam  S ^  are: 

(i)  the  absence  of  vicious  circles  in  every  quasi- structure  of  T\ 

(ii)  the  connectedness  in  every  quasi- structure  of  F; 

(iii)  the  axioms  of  each  quasi-structure  in  F  axe  already  axioms  of  and  if  D  and 

D'  axe  associated  with  the  same  premise  of  a  n-link,  then  they  axe  always  connected 
in  F  —  more  precisely,  if  <p(D)  =  in  S^,  then  [ D ]  £  e[D']  and  D'  £  e[D]  in 

F. 

As  a  part  of  the  Equivalence  Theorem  between  proof-nets  and  proof-networks 
we  prove  that  B  £  e(A)  in  <5  if  and  only  if  [ B ]  €  e[A]  in  T . 

The  strong  normalization  theorem  follows  now  from  the  fact  that  in  a  family  of 
quasi-structures  any  cut-reduction  reduces  the  total  number  of  formula-occurrences 
in  the  proof-network.  As  indicated  in  section  (1.1.2),  the  uniqueness  of  the  normal 
form  is  achieved  in  the  sense  that  different  normal  derivations  axe  mapped  to  to  the 
same  set  of  quasi-structures. 

As  a  result,  we  obtain  a  three-dimensional  representation  of  proofs.  Different 
quasi-structures  are  in  parallel  planes.  The  verification  of  the  multiplicative  condi¬ 
tions  (vicious  circle  and  connectedness  conditions)  is  performed  separately  within 
each  plane.  The  verification  of  the  additive  conditions  (Box  condition)  is  performed 
in  a  plane  perpendicular  to  that  of  the  quasi-structures.  The  determination  of  the 
conclusions  of  the  proof-network  and  the  verification  of  correctness  of  the  first-order 
condition  axe  also  performed  across  the  planes  of  the  quasi-structures;  for  instance, 
we  must  establish  the  existence  of  a  bijection  between  the  conclusions  of  any  two 
quasi-structures  in  the  proof-network. 

Such  a  geometry  has  a  computational  interpretation.  In  the  plane  of  each 
quasi-structure  we  operate  in  a  multiplicative  context,  thus  there  are  no  restrictions 
to  parallelism  (see  Girard  [1986]).  In  the  orthogonal  direction  we  axe  concerned 
with  the  input-output  of  each  computation  as  well  as  of  the  entire  process.  Syn¬ 
chronization  conditions  axe  introduced  at  this  level. 
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In  this  representation  we  can  easily  explain  in  which  sense  resource- aware  logics 
simplifies  the  practical  problem  of  the  representation  of  the  connections  of  relevance 
within  a  proof.  To  the  question  ‘  what  part  of  a  proof  is  relevant  to  a  certain  state¬ 
ment  ?\  we  can  give  a  precise  answer:  ''the  empire  of  the  corresponding  formula- 
occurrence'  (in  the  corresponding  proof-structure).  A  resource- aware  logic  has  the 
distinctive  property  that  the  relevance  connections  can  be  represented  on  the  con¬ 
clusion  of  a  proof ,  simply  by  projection  on  the  plane  of  the  conclusions. 

1.1.4.  Two  Generalizations. 

“Non-Monotonic”  Logics?  Consider  the  system  of  Sequent  Calculus  for  Propo¬ 
sitional  MLL  (Multiplicative  Linear  Logic)  and  add  to  this  system  the  structural 
rule  of  Mingle.  The  rule  of  Mingle  allows  the  combination  of  two  entirely  different 
deductive  contexts  b  T,A  and  HA  ,B  into  a  unique  context  b  T,A,A,B.  Now  by 
the  U  rule  we  can  infer  b  T,  A,  A  U  B. 

Is  this  use  of  U  appropriate  with  respect  to  its  intended  meaning?  Has  this 
fragment  any  useful  application?  Can  this  logic  be  represented  by  a  system  of  proof- 
nets  as  the  system  without  Mingle? 

Given  deductions  T>\  of  b  T,  A  and  T>2  of  b  A,  B,  the  proof-structures  S\  — 
7r(Z?j)  and  S2  =  7r(Z>2 )  still  satisfy  the  vicious  circle  condition,  and  do  not  share 
any  formula-occurrence,  thus  A  \J  B  violates  the  connectedness  condition,  since 
e(A)  H  e(B )  =  0.  But  this  property  may  be  regarded  as  characteristic  of  the  linear 
U.  To  avoid  any  confusion  in  section  (8.1)  we  use  the  notation  of  Direct  Logic, 
with  A  and  V  instead  of  ®  and  U  and  without  propositional  constants  1  and  _L. 
The  Sequent  Calculi  DL  and  DL+  are  like  those  for  MLL,  with  the  additional 
structural  rules  of  Mingle  and  Weakening,  respectively. 

To  the  second  question  we  can  only  answer  with  a  guess.  The  logic  DL  allows 
the  combination  of  two  entirely  distinct  propositional  contexts  and  yet  at  the  same 
time  maintains  a  notation  identifying  which  statements  are  relevant  to  which  state¬ 
ments.  Therefore  DL  could  be  of  use  in  the  treatment  of  non-monotonic  forms  of 
reasoning.  Or  perhaps  the  process  of  separating  the  contexts ,  i.e.,  the  passage  from 
DL  to  DL+,  can  be  used  in  such  treatments. 
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Say  that  a  proof-structure  S  for  DL  is  a  proof-net  if  in  «S  no  chain  is  a  cycle. 
This  notion  provides  an  answer  to  the  third  question. 

The  difficulty  of  the  Sequentialization  Theorem  (section  8.8)  in  this  case  lies 
in  the  fact  that  here  we  can  no  longer  apply  the  argument  of  Girard’s  alternative 
proof.  Indeed  in  the  difficult  case  when  all  conclusions  have  the  form  A,  0  Bx  for 
i  <  n,  the  fact  that  e(Aj )  is  maximal  with  respect  to  C  does  not  guarantee  the 
splitting  of  the  structure  S  into  e(Aj),  e(Bj)  and  {As  0  Bj}.  A  more  complicated 
analysis  of  the  graph-theoretic  structure  is  necessary  in  this  context  (sections  8.4, 
8.5,  8.6). 

For  the  system  DL+  there  is  a  translation  (.)*  such  that  given  a  derivation  T>  in 
DL+  or  a  proof-structure  S  for  DL+,  T>*  or  Sl  is  a  derivation  in  propositional  MLL 
with  the  ®  rule  or  a  proof-structure  for  the  same  fragment.  In  order  to  facilitate  a 
comparison  between  the  ‘ method  of  empires ’  and  the  ‘ method  of  chains'  we  provide 
also  a  direct  proof  of  the  Sequentialization  Theorem  for  DL+. 

An  Interpretation  of  ‘F  and  ‘?\  Extensions  to  the  entire  system  of  Linear 
Logic  are  possible  in  the  direction  of  the  following  remark  by  Girard: 

“The  slicing  does  not  work  for  Lboxes;  this  is  because  the  modalities  ! 
and  ?  are  the  only  nonlinear  operations  of  linear  logic.  However,  if  we 
were  working  with  !  as  an  infinite  tmsorization  0(1  n  A),  then  it  would 
be  possible  to  slice,  but  we  would  get  a  ncndenumerable  family  of  slices! 

A  more  reasonable  approach  would  be  to  make  finite  developments  based 
on  l A  =  (inA)<g)!A  so  that  we  never  go  to  the  ultimate,  nondenumerable 
slicing,  but  generate  it  continuously.  This  idea  is  of  interest  because  it 
could  serve,  without  changing  anything  essential  to  PN2,  for  expressing 
nonterminating  processes.”  (Girard  [1987b],  Remark  6.3.(ii),  page  95) 

If  we  consider  first  order  logic  only,  then  there  is  certainly  no  danger  that  a  family  of 
quasi-structures  could  become  a  nondenumerable  object  under  the  first  interpreta¬ 
tion.  We  may  define  a  translation  (.)“'  such  that  L4W  =  0(1  nAw)  and  an  operation 
0lnj4  <5  as  a  limit  of  the  operation  Times  S  in/i®in/i  S.  If  we  consider  the  rep¬ 
resentation  in  terms  of  a  family  of  quasi-structures,  we  can  see  that  it  satisfies  a 
strong  uniformity  restriction,  since  it  contains  only  structures  of  the  form 

Qii  Qij  in>4®in/l  •  •  • 
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where  Fam  S  =  {Qi,  Q2,  •••}•  Proof  Networks  here  could  be  defined  as  those  families 
T  of  structures  that  satisfy  the  previous  conditions  and  in  addition  the  compactness 
condition: 

No  quasi- structure  in  T  contains  an  infinite  chain  without  repetition. 

We  conjecture  that  a  Structure  Theorem  and  a  Sequentialization  Theorem  can 
be  obtained  for  this  notion  of  proof-net.  Then  a  Strong  Normalization  Theorem 
could  be  obtained  for  Linear  Logic,  thus  also  for  Classical  Logic,  and  the  ordinal 
complexity  of  the  proof  should  be  easily  measurable  from  the  size  of  the  given  data. 

However  we  do  not  check  the  details  here,  for  the  following  reasons.  From 
Gandy  [1980]  we  already  know  that  Strong  Normalization  for  Natural  Deduction 
can  be  formalized  in  primitive  recursive  arithmetic.  It  is  possible  that  the  ordinal 
of  the  Strong  Normalization  Theorem  for  first  order  Linear  Logic  sketched  above 
will  also  be  rather  small.  On  the  other  hand,  we  know  that  from  an  ordinal  proof 
of  Strong  Normalization  Theorem  for  second  order  Linear  Logic  we  would  obtain 
an  ordinal  analysis  of  second  order  Peano  Arithmetic.  Thus  it  would  seem  that  it 
is  the  introduction  of  second  order  logic  —  with  full  impredicative  comprehension 
axiom  —  which  makes  the  difference  between  a  relatively  small  and  a  huge  ordinal. 
If  so,  an  interesting  task  would  be  to  develop  a  theory  for  (fragments  of)  second 
order  Linear  Logic  (see  J-Y.  Girard,  A.  Scedrov  and  P.  J.  Scott  [1990]). 

1.1.5.  A  ‘good’  Natural  Deduction. 

Have  we  obtained  at  least  a  good  Natural  Deduction  system  for  Linear  Logic  without 
exponentials? 

To  discuss  this  question,  we  propose  a  notational  variant  inspired  by  the  sequent 
formulation  of  Natural  Deduction.  Suppose  we  annotate  each  formula  A  in  a  proof- 
structure  S  with 

(D(A]  -  A. 

where  F  is  the  list  of  open  doors  and  A  is  the  list  of  closed  doors  of  the  empire 
of  A  ( fake  and  side  doors  in  Girard’s  terminology).  In  the  case  of  a  first  order 
proof- structure  if  a  formula  fix.  A  is  associated  with  the  eigenvariable  a ,  then  we 
add  a  <°  {bi  ...b„)  to  the  annotations  of  fix. A ,  where  a  <°  6,  for  all  1  <  n.  In 
a  LISP  environment,  such  annotations  may  be  simply  pointers  to  other  parts  of 
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the  structure.  Notice  that  in  a  given  proof-structure  the  empire  of  a  formula  is 
completely  determined  by  its  doors. 

Considering  the  properties  of  the  annotations  when  S  is  a  proof-net,  it  is  not 
difficult  to  see  that  such  annotations  are  the  analogue  of  a  list  of  the  open  and 
closed  assumptions  in  ordinary  Natural  Deduction.  For  instance,  the  introduction 
of  a  ®-link  may  be  regarded  as  analogue  to  the  substitution  of  a  derivation  for 
an  open  assumption  of  another  derivation,  and  in  this  case  the  annotations  of  the 
conclusion  depend  on  the  annotations  of  the  premises,  as  expected. 

Similarly,  a  U-link  may  be  regarded  as  the  analogue  of  a  D-introduction,  and  in  this 
case  the  annotations  of  the  conclusion  correspond  precisely  to  the  removal  of  open 
assumptions  in  the  introduction  rule  for  implication. 

Conversely,  the  annotations  may  be  used  to  verify  whether  a  proof-structure  is  a 
proof- net. 

Is  this  good  enough ?  This  is  open  to  debate  and  to  experimentation.  We  may 
accept  the  following  hint: 

“  ‘A  mathematical  proof  must  be  perspicuous’.  Only  a  structure  whose 
reproduction  is  an  easy  task  is  called  a  ‘proof’.  It  must  be  possible  to 
decide  with  certainty  whether  we  really  have  the  same  proof  twice  over, 
or  not.  The  proof  must  be  a  configuration  whose  exact  reproduction  must 
be  certain. 

...  I  want  to  say:  if  you  have  a  proof-pattern  that  cannot  be  taken  in, 
and  by  a  change  of  notation  you  turn  it  into  one  that  can,  then  you  axe 
producing  a  proof,  where  there  was  none  before.”  (Wittgenstein,  Remarks 
on  the  Foundation  of  Mathematics,  Part  III,  1,2.) 

Next  Wittgenstein  asks  whether  a  computation  of  a  Russellian  proposition  a +  6  =  c, 
where  a,  b ,  c  axe  integers  represented  by  sequences  of  strokes,  could  be  regarded 
as  a  proof,  in  case  a  and  b  axe  laxge;  the  answer  is  no.3  To  the  question  at  the 

3  Undoubtedly  aware  that  such  a  statement  could  cause  irrelevant  discussions,  Wittgen¬ 
stein  adds:  ‘In  philosophy  it  is  always  good  to  put  a  question  instead  of  an  answer  to  a 
question.  For  an  answer  to  a  philosophical  question  may  easily  be  unfair;  disposing  of  it  by 
rro,,ns  of  another  question  '«  not.  Then  should  I  put  a  question  here,  for  example,  instead 
of  the  answer  that  the  arithmetical  proposition  cannot  be  proved  by  Russell’s  method?’ 
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beginning  of  this  section  we  may  therefore  simply  answer  with  another  question:  Is 
the  sequent  formulation  of  Natural  Deduction  a  good  formalization? 

1.2.  Realizations  and  Herbrand’s  Theorem. 

Characteristic  of  constructivist  trends  is  the  quest  for  a  fundamental  theory  that 
encompasses  most  known  forms  of  sound  reasoning  and  exhibits  the  rules  of  certain 
inference  as  well  as  those  of  effective  computation.  There  may  be  different  views  of 
the  progress  achieved  and  the  upsets  encountered  in  the  pursuit  of  constructivism, 
but  some  facts  are  established. 

Conclusive  evidence  has  been  provided  that  most  contemporary  mathematics 
can  in  principle  be  reconstructed  within  the  limits  of  constructive  prii.  ip.’es:  formal 
techniques  have  been  created  that  exhibit  the  constructive  content  of  reasoning,  and 
systematic  investigations  have  been  completed  on  the  conditions  of  their  applica¬ 
tions.  Constructivist  proof  theory  has  provided  techniques  and  problems  for  the 
classification  of  functions  according  to  their  computational  complexity.  We  have 
methods  to  obtain  constructive  realizations  of  existential  statements;  namely,  given 
a  proof  of  3x.<p(x),  we  can  constructively  produce  a  value  t  satisfying  the  predi¬ 
cate  (the  Existential  Property)  or,  given  a  proof  of  Var.3y.(/?(i,  y),  a  constructive 
function  /  such  that  Vx.tp(x,  f(x)).  Furthermore,  we  know  that  this  construction 
is  possible  for  proofs  within  intuitionistic  logic  and  that  in  certain  circumstances 
similar  techniques  can  also  be  used  for  classical  proofs. 

However  it  cannot  be  denied  that,  once  Hilbert’s  ‘finitist’  approach  has  been 
shown  inadequate,  it  becomes  difficult  to  delimit  the  boundaries  of  such  a  fundamen¬ 
tal  theory,  or  more  precisely,  to  determine  whether  or  not  some  other  dichotomy 
should  replace  Hilbert’s  opposition  finitary  -  infinitary,  in  order  to  discriminate 
between  the  real  and  the  ideal  statements  of  mathematics.  The  alternative  is  to 
understand  constructivism  as  leading  to  general  methods  of  providing  constructive 
interpretations  of  given  results,  a  hermeneutical  rather  than  a  fundamental  theory. 

Part  of  the  problem  is  that  on  the  one  hand  a  foundational  theory  of  con¬ 
structive  mathematics  may  include  some  fragment  of  the  analytical  hierarchy  as 
constructive,  and  on  the  other  hand  a  theory  of  feasible  computation  may  want  a 
much  narrower  definition  of  constructivity.  For  practical  computation,  subclasses  of 
the  primitive  recursive  functions  are  the  most  interesting  categories.  In  consequence, 
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a  variety  of  hierarchies  have  been  introduced  and  constructive  complexity  forms  a 
continuous  slope  along  which  it  is  hard  to  detect  the  fault  line  of  any  fundamental 
distinction. 

In  addition,  it  has  been  disappointing  to  discover  that  constructivist  methods 
that  work  so  successfully  in  principle  are  not  expected  to  be  good  candidates  for  the 
solution  of  interesting  mathematical  problems  in  practice ,  say,  in  number  theory  or 
in  combinatorics  —  at  least  not  without  additional  extensive  work  on  the  practical 
conditions  of  their  application.  Indeed,  one  would  expect  that  a  fundamental  theory 
would  naturally  produce  applications  to  different  areas  of  knowledge.  Of  course,  one 
could  say  that  Kepler’s  laws  did  not  immediately  produce  space  stations.  But  these 
considerations  can  only  encourage  us  to  keep  concrete  possibilities  and  practical 
obstacles  in  mind  while  designing  formal  languages  and  systems  that  are  intended 
as  contributions  to  the  representation  and  understanding  of  mathematical  reasoning. 

Finally,  some  of  the  techniques  available  to  the  intuitionistic  mathematician  are 
also  available  to  the  classical  one.  Given  a  proof  of  Sx.tp(x)  in  classical  predicate 
calculus,  one  may  apply  Herbrand’s  theorem  instead  of  the  intuitionistic  existential 
property  and  obtain  a  finite  list  of  values  t\ , . . . ,  tn  such  that  ip(t  j  )  V...  V  ¥>(<„).  Is 
a  list  of  values  much  worse  than  a  single  value?  If  we  have  a  variety  of  applications 
in  mind,  is  it  worse  at  all? 

Similarly,  given  a  proof  of  any  statement  A  in  Heyting  arithmetic,  Godel’s 
Dialectica  Interpretation  produces  functionals  of  higher  type  that  realize  the  essen¬ 
tially  existential  quantifiers  of  A.  On  the  other  hand,  given  a  proof  of  A  in  Peano 
Arithmetic,  Kreisel’s  No  Counterexample  Interpretation  (NCI)  yields  a  realization 
by  a-recursive  functionals  of  type  2,  for  a  <  eo  and,  in  addition,  may  save  us  from 
introducing  inessential  dependencies  that  are  required  by  the  Dialectica  translation. 

Practical  applications  of  these  methods  heavily  depend  on  the  context.  If  the 
induction  formula  is  of  high  quantificational  complexity,  the  definition  of  the  inter¬ 
pretation  may  become  tricky.  On  the  other  hand,  if  it  happens  that  we  can  restrict 
ourselves  to  cuts  and  induction  formulas  of  limited  quantificational  complexity,  say 
11°  cuts  and  induction  formulas,  then  the  interpretation  is  entirely  straightforward. 
This  remains  true  if  the  induction  rule  depends  on  quantificationally  complex  as¬ 
sumptions,  although  in  this  case  the  NCI  yields  realizations  that  may  depend  on 
new  function  parameters  (see  the  next  section).  Again,  is  a  parametric  result  much 
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worse  than  a  unique  result?  Can  we  exploit  the  presence  of  parameters  to  obtain 
solutions  to  a  family  of  problems,  rather  to  a  single  one? 

1.2.1.  An  Application  to  Ramsey  Theory. 

We  use  the  term  unwinding  for  the  extraction  of  information  implicit  in  a  proof, 
through  transformations  of  either  informal  arguments  or  of  formalized  derivations. 
The  following  type  of  application  is  of  interest  to  us.  Suppose  we  have  a  proof  of 
a  statement  of  the  form  Vx.3y.^(x,y),  expressing  the  fact  that  a  certain  set  H  is 
unbounded.  Then  the  above  techniques  allow  us  to  define  a  function(al)  F  such 
that 

(1)  Vx.^(x,F(x)) 

and  at  the  same  time  provide  information  about  its  complexity. 

Fruitful  use  of  this  method  in  practice  depends  on  the  conditions  of  the  proof. 
In  the  simplest  and  best-known  case  <f>  is  quantifier-free,  and  (1)  is  (inductively) 
derived  from  universal  axioms.  What  happens  in  the  case  of  more  complex  axioms? 
Consider  a  formal  deduction  of  a  sentence  of  the  form  (1)  from  assumptions  of  the 
form 

(2)  Vu.3v.Vz.0(u,  u,  z) 

and  suppose  that  (2)  contains  the  definition  of  the  set  H.  The  NCI  functional 
interpretation  of  (2)  =»  (1)  yields  functionals  U ,  Z  and  F,  where  U  and  Z  axe 
functionals  of  v,  x,  such  that 

Vvx.[Wv[£/),Z)3tfi,r(v,*))] 

The  (set  of)  parameter(s)  v  may  be  crucial  in  determining  the  set  H'  which  is 
defined  by  6(U,\[U],  Z).  If  we  let  v  satisfy  Skolem  axioms  of  the  form 
Vu.3v.Vz.0(u,  v,  z)  D  Vttz.0(u,  v[u],  z),  then  H  is  H However  the  choice  of  different 
parameters  gives  us  the  opportunity  to  search  for  interesting  sets  H' . 

In  the  second  part  of  the  dissertation  we  analyze  the  Infinite  Ramsey  Theorem 
(see  Graham,  et  al.  [1980] )  and  present  applications  that  are  relevant  to  some 
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finite  versions  of  Ramsey’s  Theorem.4  Let  [N]*  be  the  set  of  all  fc-element  subsets 
of  the  natural  numbers  N.  Given  any  c-coloring  x  '■  [N]*  — ►  c,  a  subset  A  of  N 
is  x-homogeneous  if  all  ^-element  subsets  of  A  axe  monochromatic. 

Infinite  Ramsey  Theorem.  (IRT)  For  every  c,  k  and  any  c-coloring  x  ■  [N]*  — ►  c, 
there  is  an  infinite  x-homogeneous  set  H . 

Let  [ni,n2]fe  be  the  set  of  ^-element  subsets  of  {«i,. . .  ,  n2  —  1},  [n]k  =  [0,n]*.  Say 
that  A  is  large  if  \A\  >  min(A). 

Finite  Ramsey  Theorem.  (FRT)  For  every  c,  k,  l  there  is  a  number  n  = 
R(c,k,l)  such  that  for  any  c-coloring  x  •  [n]fc  — *  c,  there  exists  a  x-homogeneous 
subset  A  of  [n],  with  |A|  =  /. 

Ramsey-Paris-Harrington  Theorem.  (RPH)  For  every  c,  k  and  n\,  there 
exists  n2  =  LR{c,k,n\ )  such  that  for  every  coloring  x  ’•  [ni>n2]*  — ►  c  there  is  a 
large  x-homogeneous  set. 

We  consider  the  case  of  c  =  k  =  2.  The  Infinite  Ramsey  Theorem  can  be 
formally  proved  in  a  system  of  second  order  arithmetic.  Since  k  is  fixed,  in  this 
thesis  we  use  instead  first  order  Peano  Arithmetic,  with  additional  function  and 
predicate  symbols  —  we  need  a  binary  function  symbol  for  x  and  a  unary  function 
symbol  for  an  auxiliary  x3<“6;  a  unary  predicate  for  H,  a  unary  predicate  for  an 
auxiliary  set  H\  and  a  binary  predicate  for  the  sequence  of  sets  5(n),  where  x3'afc, 
H,  H i,  S(n )  are  defined  in  Section  (12)  below.  Given  an  interpretation  J  for  the 
extended  language,  Hj  (in  the  standard  model)  is  the  desired  xi-homogeneous  set, 
assuming  that  the  defining  properties  of  x*to(\  H,  Hi  and  S(n)  are  satisfied  in  J. 

The  proof  can  be  divided  into  two  parts:  the  first  part  shows  that  the  set  H 
is  unbounded  and  the  second  that  H  is  X'homogeneous.  Part  one  has  the  form 
(2)  ==>•  (1),  where  (1)  expresses  that  H  is  unbounded,  and  (2)  contains  the  formal 
definition  of  H  and  of  the  auxiliary  sets,  together  with  the  assumption  that  \  is  a 
2-coloring. 

The  main  result  is  the  following.  We  give  a  formula  expressing  restrictions 
for  a  “meaningful”  choice  of  the  parameters  v,  called  the  N on- Triviality  Condition 
(NTC).  This  must  be  satisfied  either  globally,  for  all  n,  or  locally,  over  the  segment 
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[x,y],  in  which  case  we  write  NTC[x,y],  In  the  statement  of  the  main  theorem 
-P1^)(x»v?n)  =  F(x,v,i?*l-11(X)vin))  is  the  l-th.  iteration  of  F. 

Parametrized  Ramsey  Theorem  (PRT):  There  is  a  functional  F,  primitive 
recursive 5  in  x,  v,  Sf  H\,  such  that  for  every  coloring  \  '■  [N]2  — * ►  [2]  and 
every  choice  of  y , 

(i)  if  v  satisfies  the  (NTC)  and  p  =  F^l\x,v,  1),  then  [p]  contains  a 
X-homogeneous  set  of  cardinality  /; 

(ii)  if\  satisfies  the  (NTC)[x,y]  and  p0,...pi  6  [x,y],  where  p,  =  F(,)(y,  v,p0), 
then  [x,y]  contains  a  x-homogeneous  set  of  cardinality  l. 

Moreover,  for  all  x  °-nd  l,  there  exists  v  satisfying  the  NTC;  in  particular: 

(1)  for  any  fixed  x>  some  v  satisfies  the  NTC  for  all  l; 

(2)  for  any  fixed  l,  there  exist  p  and  v  satisfying  NTC[0,p]  for  all  x; 

(3)  for  any  fixed  n\,  there  exist  n2  and  v  satisfying  NTC[ni,n2]  for  all  x,  with 
l  =  F(x,v,m). 

Corollary  1:  The  Parametrized  Ramsey  Theorem  and  Compactness 6  imply  the 
Infinite  Ramsey  Theorem  for  c  =  k  —  2. 

Corollary  2:  The  Parametrized  Ramsey  Theorem  implies  the  Finite  Ramsey  The¬ 
orem  for  c  =  k  =  2. 

Corollary  3:  The  Parametrized  Ramsey  Theorem  implies  the  Erdos- Mills  version 
of  the  Ramsey-P ans-Earrington  Theorem  for  ~  —  k  =  2. 

The  PRT  can  be  regarded  as  a  generalization  of  both  the  Infinite  and  the  Finite 
Ramsey  Theorem  as  shown  by  the  corollaries.7  This  theorem  provides  a  precise 
mathematical  content  to  the  following  phenomenological  remark.  In  the  proofs  of 
the  Ramsey  Theorems  under  consideration,  two  components  can  be  distinguished: 

5  In  fact,  F  is  in  £2{x,Sf,Hi,v),  the  third  class  in  the  Grzegorczyk  hierarchy  rela¬ 
tivized  to  x,  v,  Sf  and  H\ . 

6  Since  we  consider  only  countable  colorings,  when  we  speak  of  “Compactness”  we 
mean  an  application  of  (Weak)  Konig’s  Lemma. 

7  Remember  that  we  cannot  derive  the  Infinite  Ramsey  theorem  from  the  Finite  version 
by  Konig’s  Lemma  (at  least  not  in  a  conservative  extension  of  PA,  since  the  IRT  implies 
the  RPH  Theorem). 
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(i)  the  common  frame  of  the  infinite  and  finite  versions  of  the  theorem  is  the 
structure  of  their  recursive  definitions  and  inductive  arguments;8 

(ii)  the  properties  of  the  set  H  —  being  x-homogeneous,  or  of  a  certain  car¬ 
dinality,  or  large  —  depend  on  the  choice  of  certain  set  and  function  parameters, 
different  parameters  yielding  different  versions  of  the  theorem. 

Component  (i)  is  represented  by  the  functional  Ax  v.F;  the  choices  in  (ii) 
are  represented  by  the  parameters  5  and  v.  The  NTC  provides  constraints  for 
the  choices  in  (ii)  to  be  meaningful.  The  computational  complexity  of  the  proof 
is  determined  by  the  choices  in  (ii)  and  by  the  verification  of  the  NTC,  while  the 
computational  complexity  of  F  itself  is  very  low. 

Although  we  have  not  checked  it  in  detail,  it  seems  clear  that  one  can  prove 
the  PRT  for  arbitrary  exponents  k,  following  the  pattern  of  the  proof  given  below 
for  k  =  2. 

1.2.2.  Use  of  Direct  Logic  in  Unwinding. 

For  our  unwinding  we  formalize  the  proof  of  the  Infinite  Ramsey  Theorem  using 
the  notation  of  Direct  Logic  for  some  parts  of  the  proof.  Next  we  apply  Herbrand’s 
Theorem  to  the  parts  in  question  and  the  NCI  to  the  rest. 

First  notice  that  it  would  be  foolish  to  use  the  translation  (.)+  from  Classical 
Logic  into  Linear  Logic.  We  do  not  want  to  prove  formulas  in  which  every  atom  P 
is  replaced  by  ?!P;  it  would  be  of  no  interest  to  study  proofs  of  Ramsey  Theorem 
with  arbitrarily  complex  cuts  and  to  compare  them  with  the  results  of  the  Cut 
Elimination  procedure.  Fortunately,  we  will  succeed  in  considering  only  II8  cuts 
and  induction  formulas.  On  the  other  hand,  using  Direct  Logic  as  much  as  possible 
in  the  proof  simplifies  the  procedure,  due  to  the  following  facts. 

Let  £  be  a  first  order  language.  Let  5  be  any  sequent  in  £  and  let  £'  be  an 
extension  of  £  containing  Herbrand  functions  for  the  essentially  universal  quantifiers 
of  5.  We  use  the  boldface  y  for  the  Herbrand  function  as  a  formal  symbol  of  the 
extended  language  £',  where  y  is  associated  with  an  essentially  universal  quantifier 
Vy  of  5.  By  Herbrand’s  Theorem,  in  £'  there  axe  terms  t  and  a  quantifier-free 

8  Thus  an  alternative  proof  of  the  Finite  Ramsey  theorem  by  double  induction  (see 
Graham  et  al.[l980],  p.3)  does  not  belong  to  this  family  of  proofs. 
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sequent  £%(S)  (the  Herb-rand  expansion  of  S)  such  that  S  has  a  normal  derivation 
in  Classical  Logic  if  and  only  if  5^(5)  has  one. 

If  £t(S)  is  obtained  from  5  by  replacing  the  essentially  universal  variables  y 
by  Herbrand  functions  y  and  the  essentially  existential  variables  x  with  t,  then  we 
write  Sh  for  £j(S).  Herbrand’s  Theorem  has  this  particularly  simple  form  in  Direct 
and  Multiplicative  Linear  Logic. 

Herbrand’s  Theorem:  Let  <f>  :  dxi.Vyj. . . .  .Vyn.0  be  in  prenex  form,.9  There 
are  terms  tj, . . .  ,t„  €  £  such  that  <f>  is  provable  in  First  Order  Direct  Logic  if  and 
only  if  <t>H  '■  '0(^1 , yi  [ti], . . . ,  tn, yn[ti,  -  •  • ,  t„])  is  provable  in  Propositional  Direct 
Logic.10 

The  following  fact  is  practically  useful: 

Lemma.  Let  V  be  a  derivation  of  S  in  first  order  MLL  in  which  the  only  applica¬ 
tion  of  Cut  is  the  last  inference  and  such  that  the  Cut-formula  is  II®.  Let  Sh( s)  be 
the  Herbrand  expansion  of  the  conclusion ,  defined  by  induction  on  V.  If  V*  is  the 
result  of  the  Cut- elimination  procedure  and  Stf  (t )  is  the  Herbrand  expansion  of  the 
conclusion  defined  by  induction  on  D* ,  then  s  =  t.11 

1.3.  Conclusion. 

The  technical  work  in  this  thesis  thus  aims  at  two  different  problems  (1)  the 
search  for  a  new  Natural  Deduction  system  enjoying  the  uniqueness  of  the  normal 
form,  and  (2)  the  extraction  of  implicit  information  from  a  given  mathematical 
proof  by  the  application  of  functional  interpretations.  In  both  cases  it  has  been 
useful  to  consider  Linear  Fragments  of  Classical  Logic.  We  believe  that  work  in  this 
area  is  also  producing  more  sophisticated  tools  to  analyze  deductive  relevance  and 
irrelevance. 

9  The  restriction  is  essential,  as  shown  by  the  counterexample 
Vx.(d>(x)  A  VO  V  (Vy.$(y))  A  0>  while  <£(y)  At />  I-  <f>(  y)  A  i/>,  as  mentioned  in  section  (1.1.1). 

10  The  same  property  holds  if  conditional  terms  if .  .  -  then .  .  .  else .  .  .  can  be  expressed 
in  C.  In  this  case  we  may  call  the  terms  t  £  £'  functionals  of  predicate  logic. 

11  This  is  not  true  in  general  for  Direct  Logic:  if  the  Cut-formula  is  introduced  by 
Weakening,  say,  in  the  derivation  of  the  left  premise,  then  in  V*  all  the  side  formulas  of 
the  right  premise  are  introduced  by  Weakening,  thus  some  terms  in  t  may  be  simpler  than 
some  terms  in  s. 
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The  techniques  presented  here  are  not  recommended  for  all  uses.  For  instance, 
we  introduced  Families  of  Quasi- Structures  for  Linear  Logic  in  order  to  attack 
problem  (1),  but  preferred  the  notation  of  Direct  Logic  for  problem  (2).  In  fact  we 
do  not  expect  that  progress  in  the  two  directions  will  depend  on  the  same  technical 
improvements.  Perhaps  the  following  question  is  relevant  here: 

Are  we  ready  at  the  present  stage  of  research  to  present  a  unified  theory  of  proofs 
that  accounts  for  all  major  functions  of  efficient  deductive  reasoning  through  the 
tools  of  a  formal  representation? 

Wittgenstein’s  remark  quoted  in  section  (1.1.5)  applies  to  formal  and  mechan¬ 
ical  representations  of  proofs  insofar  as  they  intend  to  maintain  the  features  of 
informal  reasoning  that  make  it  suitable  to  convey  evidence.  But  the  same  remark 
applies  mutatis  mutandis  to  formal  representations  insofar  as  they  intend  to  exhibit 
the  computational  content  of  a  proof. 

Unfortunately,  there  seems  to  be  no  guarantee  that  what  is  efficient  to  convey 
evidence  will  also  be  efficient  to  represent  a  computation.  In  the  introduction  to  his 
thesis,  also  focusing  on  computational  applications  of  Proof  Theory,  C.Goad  says: 

“It  is  necessary  to  keep  computational  considerations  explicitly  in  mind 
when  constructing  proofs  which  are  intended  as  descriptions  of  computa¬ 
tion.  The  best  proof  of  a  formula  Vx.3y.<^>(x,  y)  according  to  such  standard 
criteria  as  brevity,  elegance  or  comprehensibility,  will  often  embody  a  very 
bad  algorithm.  Conversely,  a  proof  of  Vx.3y.y>(x,  y)  which  formalizes  a 
good  algorithm  will  generally  constitute  a  rather  unnatural  way  of  estab¬ 
lishing  the  simple  truth  of  the  formula. ’’(Goad  [1980]  ) 

However,  it  is  not  impossible  that  improvements  in  understanding  of  informal  rea¬ 
soning  may  help  us  make  our  formal  languages  more  concise,  elegant  or  comprehen¬ 
sible  and  at  the  same  time  more  efficient  as  tools  for  computation.  For  instance, 
it  seems  that  the  study  of  resource- aware  logics  improves  our  understanding  of  the 
notion  of  relevance  within  a  proof,  and  at  the  same  time  simplifies  the  verification 
of  functionals  defined  in  the  process  of  unwinding.  Similarly,  one  may  hope  that  the 
production  of  formalisms  that  are  not  only  ecological  but  also  efficient  in  accounting 
of  the  necessary  resources  would  be  fruitful  for  computation  and  instructive  for  our 
understanding  of  informal  mathematical  reasoning. 
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The  language  Cl  for  Girard’s  Commutative  and  Noncommutative  Linear  Logic 
is  described  (see  Girard  [1987b] )  and  some  notational  conventions  are  established. 

Cl  is  a  first  order  language  containing  symbols  for  n-ary  predicates  and  func¬ 
tions,  for  n  >  0,  the  propositional  constants  T,  1,  _L  and  0,  the  unary  propositional 
operations  ()x  ( linear  negation),  !  (of  course f)  and  ?  ( why  not?),  the  binary  con¬ 
nectives  ®  (times),  L)  (par),  PI  (with)  and  ©  (plus),  and  the  first  order  quantifiers  f\ 
(all)  and  V  (some). 

The  notion  of  a  term  and  a  formula  in  the  language  Cl  is  defined  in  the  usual 
manner. 

Definition.  Any  variable  is  a  term.  If  ti,...,tn  is  a  list  of  terms  and  /  is  an 
n-ary  function  symbol,  then  f(t\, . . .  ,tn)  is  a  term.  If  t\, . . .  ,tn  is  a  list  of  terms 
and  P  is  an  n-ary  predicate  symbol,  then  P(t\ ,.. .  ,tn)  is  an  atomic  formula.  The 
propositional  constants  T,  1,  X  and  0  are  atomic  formulas.  If  A  is  a  formula,  then 
A1  is  a  formula.  If  A  is  a  formula,  then  l A  and  ?A  are  formulas.  If  A  and  B  are 
formulas,  then  so  are  A®  B,  AUB,  AC\B  and  A®  B.  If  A  is  a  formula  and  x  is  a 
variable,  then  f\x.A  and  \j  x.A  are  formulas. 

For  any  formula  A  and  a  list  (t  i , . . . ,  tn)  of  terms,  we  use  the  notation  A(t\ ,...  ,tn 
for  A  with  all  the  free  occurrences  of  the  variable  Xi  replaced  by  t i  for  t  =  1, 2, . . . ,  n. 

Remark  1.  In  Non- Commutative  Linear  Logic  the  following  are  valid  schemata. 

lx  =  1,  lx  =  1,  Tx  =  0,  0X  =  T, 

Axx  =  A, 

(A®B)±  =  B1UA1,  (AuB)1  =  B1  ®Ax, 

(A  PI  B)1  =  Ax  ®  Bl,  (A  ©  B)1  =  Ax  n  Bx, 

(U)1=?(AJ-),  (7/1)1  = 

(f\x-A)1  =  \/  x.(Ax),  (\fx.A)1  =  /\i.(Xx). 

Using  these  laws  we  can  reduce  the  scope  of  linear  negation.  We  therefore  adopt 
the  following  convention: 

Linear  Negation  will  be  applied  only  to  atomic  formulas. 
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The  following  Linear  implications  can  be  defined: 

A —o  B  =d/ Ax  U  B  and  A  o-  B  =df  A  U  Bx. 

Remark  2.  In  Commutative  Linear  Logic  the  schemata  listed  in  Remark  1  are 
valid  and,  in  addition,  we  have 

A  ®  £  =  5  ®  A,  AU  B  =  B  U  A  A  -o  B  =  B  o-  A. 

Therefore,  the  following  laws  will  be  applied  to  reduce  the  scope  of  linear  negation 
in  Commutative  Linear  Logic: 

(A  <g>  B)1  =  Ax  U  Rx,  {A  U  B)l  -  Ax  <g> 

2.1.  The  Sequent  Calculus  LL. 

We  describe  the  sequent  calculus  LL  presented  in  Girard  [1987b],  with  only 
minimal  variations,  and  we  list  the  subsystems  of  LL  of  interest  to  us. 

We  work  in  the  language  Cl-  A  sequent  S,  written  as  b  T,  is  a  finite  sequence 
of  formulas.  We  use  Greek  capital  letters  for  finite  sequences  of  formulas.  As 
usual  h  T,A  stands  for  h  T*  (A),  where  *  j.s  the  concatenation  operation.  If  F  is 
Ai , . . . ,  A„,  then  T  is  interpreted  as  Ai  U  . . .  U  An,  using  multiplicative  disjunction. 

Remark.  According  to  the  standard  usage,  the  symbol  “b”  is  here  a  purely  formal 
notation,  albeit  a  suggestive  one,  that  characterizes  h  T  as  an  expression  of  the 
sequent  calculus. 

Logical  axioms  are  sequents  b  P*-,P  (where  P  is  atomic). 

Non-logical  axioms  (or  nonlogical  initial  sequents)  are  arbitrary  sequents  b  T.  * 

The  only  structural  rule  is  Exchange. 

Exchange  ' 

Commutative  Non  Commutative 

b  r,  a,r,  a  br,A 


b  r,B,  A,  A 


b  A,r. 
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Remark.  By  iteration  of  the  Noncommutative  or  Commutative  Exchange  Rule  we 
obtain  permutations  of  the  given  sequent  that  axe  cyclic  or  arbitrary,  respectively. 
We  do  not  obtain  an  interesting  logic  if  Exchange  is  dropped  entirely.  In  fact,  we 
insist  that  the  rule  Cut  must  behave  exactly  like  the  times  rule,  for  reasons  that  will 
become  clear  later.  Given  such  a  requirement  on  Cut,  the  absence  of  any  Exchange 
rule  induces  unacceptable  restrictions  to  the  type  of  formulas  which  Cut  can  be 
applied  to. 

Multiplicative  rules. 


1-Axiom 

JL  -  Rule 

h  1 

h  r 

hr,i 

Conjunction  (times) 

Disjunction  (par) 

hr, A  h  £,  A 

b  r,  a,  b 

h  r,A®  £,A 

b  r,  a  u  b 

Additive  rules. 


T- Axiom 

(no  rule  for  0) 

ht,t 

Conjunction  (with) 

Disjunction  (plus) 

hr,  a  br,B 

hr,  a  br,R 

b  r,An  b 

b  r,A®  5  b  r,  a  ®  J5 

Quantification  rules  (first  order). 


Universal  Quantification 

Existential  Quantification 

b  T,A(a) 

b  r,A(t) 

b  r,  f\x.A(x), 

b  r,v*.A(x) 

where  the  variable  a  does  not 

occur  in  r. 
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Exponentiation  rules. 


Dereliction 

f-  r,A 

h  r,?A 

!  (of  course) 

Weakening 

h  ?r,A 

«-r,± 

h  ?r,  ia 

b  r,  ?.4 

where  ?T  is  a  sequence  C i , .  •  - ,  Cm  and 

for  all  i  <  n  C,  is  either  _L  or  of  the  form  ?£,. 

Contraction 

b  t,?a,?a 

b  r,?A 

In  addition,  we  have  the  Cut  rule: 


I-  T,A\~  A\A 


According  to  the  standard  terminology,  the  formula  A ,  occurring  positively  in  the 
left  upper  sequent  and  negatively  in  the  right  upper  sequent  is  called  Cut  formula. 

Derivations  are  inductively  defined  as  usual.  Also  the  notion  of  branch  in  a 
derivation  is  as  usual.  In  each  of  the  above  rules,  the  indicated  formulas  in  the  upper 
sequent(s)  are  the  active  formulas  and  the  indicated  formula  in  the  lower  sequent 
the  principal  formula.  All  the  other  formulas  in  the  indicated  sequences  are 
side  formulas.  The  active  formula(s)  are  the  immediate  ancestors  of  the  principal 
formula  and  the  relation  “...  is  an  ancestor  of  ...”  is  the  transitive  closure  of  “... 
is  an  immediate  ancestor  of  ...” . 

Remark.  In  the  inferential  step  from  b  T,A  10  b  r^x.A  we  must  keep  the 
occurrences  of  x  in  the  sequent  and  in  the  derivation  under  control.  Following 
the  standard  practice,  we  work  with  an  infinite  additional  set  of  eigenvarxables  (or 
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parameters)  a,  b,. . .  and  we  assume  that  for  every  principal  formula  f\x.A,  f\y.B 
in  a  derivation,  the  eigenvariable  a  of  f\x.A  is  different  from  the  eigenvariable  b 
of  f\y.B.  In  particular,  every  derivation  enjoys  the  pure  parameter  property:  the 
eigenvariable  a  associated  with  f\x.A  occurs  only  above  the  inference 

HP,A(a) 

h  r,/\x.A. 

Definition.  The  system  of  sequent  calculus  LL  for  First  Order  Commutative 
Linear  Logic  is  based  on  the  language  Cl  and  contains  Logical  Axioms,  the  Com¬ 
mutative  Exchange  Rule  and  the  Multiplicative,  Additive,  Quantification  and  Ex¬ 
ponentiation  Rules.  We  consider  the  following  subsystems: 

( i )  propositional  [and  first  order]  MLL-  is  the  multiplicative  fragment  without 
1  and  J_  and  contains  only  Logical  Axioms,  the  Commutative  Exchange  Rule,  the 
rules  for  times  and  par  [and  the  quantification  rules]. 

(n)  propositional  [and  first  order]  MLL  is  the  multiplicative  fragment,  and  contains 
the  the  axiom  for  1  and  the  rule  for  JL  in  addition  to  the  axioms  and  rules  of 
propositional  [and  first  order]  MLL-. 

(iii)  propositional  [and  first  order]  MALL  is  the  full  multiplicative  and  additive 
fragment,  and  contains  axioms  and  rules  of  propositional  [and  first  order]  MLL 
plus  the  axiom  for  T  and  the  rules  for  with,  plus. 

( iv )  propositional  and  first  order  NCMLL-,  NCMLL  and  NCMALL  are 
the  sequent  calculi  for  Non  Commutative  Linear  Logic  are  like  the  corresponding 
commutative  systems,  but  allow  only  the  Non  Commutative  Exchange  Rule. 

2.2.  A  Note  on  Semantics. 

We  give  a  short  description  of  two  semantics  for  Linear  Logic  presented  in 
Girard  [1987b],  for  the  convenience  of  the  reader. 

Proofs  in  Commutative  Linear  Logic  can  be  interpreted  in  the  category  of 
Coherent  Spaces  and  Linear  Maps,  (see  Girard  [1987b],  pp.  14-17  and  48-60). 

Given  a  set  S,  a  coherent  space  A  is  a  set  of  subsets  of  5  satisfying  the  two 
conditions 
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(i)  if  a  6  X  and  b  C  a,  then  6  €  A''; 

(n)  if  A  C  X  and  for  all  a,  6  €  A  we  have  a  U  b  6  A',  then  UA  €  A'. 

A  linear  map  F  :  X  — ►  X  of  coherent  spaces  is  a  function  satisfying  the  following 
four  conditions: 

( i )  if  a  C  b  €  Ar  then  F(a)  C  F(6); 

(n)  if  a  U  6  €  AT  then  F(a  fl  b)  =  F(a)  fl  F(b)\ 

(Hi)  if  a  U  b  £  X  then  F(a  U  b)  =  F(a)  U  F(b)\ 

(tv)  F(0)  =  0. 

The  coherent  spaces  X  ®  Y  and  X  L)  Y  are  variants  of  the  cartesian  product 
of  coherent  spaces  and  the  coherent  spaces  X  F\Y  and  A'  ®  Y  are  variants  of  the 
direct  sum  (disjoint  union)  of  coherent  spaces.  For  this  reason,  1,  _L,  ®  and  U  are 
called  multiplicaiives  T,  0,  &:  and  ©  additives. 

Other  non-standard  semantics  have  been  given  for  Commutative  Linear  Logic, 
(see  Girard  [1987b],  Lafont  [1988],  Marti-Oliet  and  Meseguer  [1989]).  We  men¬ 
tion  only  the  Phase  Semantics  (Girard  [1987b]  ,  pp. 17-28). 

Definition.  A  phase  space  is  a  pair  (P,  X),  where  (P,  •,  1)  is  a  commutative  monoid 
and  X  is  distinguished  subset.  Given  any  subset  X  of  P,  let  X1-  be  {p  €  P  :  p- X  C 
X).  A  fact  is  a  subset  F  such  that  F -L-L  =  F. 

A  topolinear  space  (P,  X,F)  is  a  phase  space  (P,  X)  together  with  a  set  F,  the  set 
of  closed  facts  of  (P,  X),  satisfying  the  conditions 

(i)  F  is  closed  under  arbitrary  intersections  (n); 

( ii )  F  is  closed  under  finite  U,  so  X  €  F; 

(Hi)  X  C  F,  for  all  F  €  F; 

(iv)  F  U  F  =  F,  for  all  F  €  F. 

If  F  €  F,  then  F1  is  an  open  fact. 

An  interpretation  I  of  Cl  in  (P,  X)  is  an  assignment  of  facts  to  the  formulas  satis¬ 
fying  the  definition  below.  We  assign  the  subset  X  to  the  symbol  X  and  the  subset 
P  to  the  symbol  T  —  it  is  easy  to  prove  that  the  subset  X  and  P  are  facts. 

If  P  is  an  atomic  formula,  then  Pj  is  a  fact  and  (P±)i  —  (Fz)1-  Moreover 
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(1) (A®B)I  =  [(X)I.(S)IJJ-J-; 

(2)  (AUB)1  =  HA)^(B)^-, 

(3)  (jnS),  =  (A)iD(B)z; 

(4)  (AeSfr^KAh  UIB)?]11. 

Finally  in  a  topolinear  space  we  define 

(5)  (?A)j  =  the  smallest  closed  fact  containing  Aj\ 

(6)  (!A)x  =  the  largest  open  fact  contained  in  Aj. 

A  phase  structure  is  a  phase  space  (P,_L)  together  with  an  interpretation  T.  A 
formula  A  is  valid  in  a  phase  structure  ((P,  _L),  J)  if  1  €  A%.  A  topolinear  structure 
is  a  phase  space  (P,  _L,F)  together  with  an  interpretation  J.  A  formula  A  is  valid 
in  ((P,X,F),J)  if  1  €  A%.  A  formula  A  [without  exponentials]  is  linear  tautology 
if  A  is  valid  in  any  topolinear  structure  [phase  structure]. 

The  following  topolinear  space  may  be  regarded  as  the  canonical  model  for  LL  in 
Phase  Semantics.  Let  P  be  the  set  of  multisets  of  formulas  of  Cl  (i.e.,  sequences 
of  formulas,  up  to  their  order).  (P,  *,0)  is  a  monoid,  where  *  is  concatenation  of 
multisets.  We  let  X  be  the  set  of  multisets  T  such  that  H  T  is  provable  in  the  sequent 
calculus  LL.  Then  we  can  show  that  ((P,*),0,  X)  is  a  phase  space.  We  define  a 
canonical  interpretation  I  of  Cl  by  letting 

Aj  =d f  {r :  Fll  r,  A}. 

Furthermore,  we  define  F  as  follows.  For  all  facts  XcP, 

X  €  F  if  and  only  if  X  =  P|(?A,)x,  for  some  sequence  A\ ,  Ai . . . . 

i 

It  is  easy  to  prove  the  consistency  and  completeness  of  LL  with  respect  to  Phase 
Semantics.  In  particular,  if  A  is  a  linear  tautology,  then  Aj  is  true  in  the  canonical 
model  for  any  interpretation  T.  Thus  0  €  Aj,  i.e.,  h  A  is  provable  in  LL. 
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3.  Proof- Structures  for  Linear  Logic. 

Definition.  A  proof- structure  S  consists  of 

(i)  a  nonempty  set  of  formula- occurrences,  i.e.,  of  indexed  formulas,  (or,  equivalently, 
a  multiset  of  formulas)  together  with 

(ii)  a  set  of  relations,  or  links ,  between  formula-occurrences;  if  a  list  of  distinct 
formula-occurrences  is  in  a  link,  then  the  list  can  be  divided  in  two  sublists,  the 
premises  and  the  conclusions.  A  link  is  unary  or  binary  if  it  has  one  or  two 
premises,  respectively. 

(iii)  In  a  proof- structure  formula-occurrences  and  links  must  satisfy  the  properties 
that 

(1)  every  formula-occurrence  is  the  conclusion  of  one  and  only  one  link; 

(2)  every  formula-occurrence  is  the  premise  of  at  most  one  link. 

(iv)  a  partial  function  <p  :  S  — * ■  <S,  called  flagging  function. 

Remark.  There  is  another  natural  representation  of  proof-structures,  describing 
them  as  graphs ,  whose  nodes  axe  labeled  with  formulas  and  whose  edges  connect 
either  a  premise  and  the  conclusion  of  a  link,  or  all  the  conclusions  of  a  link.  We 
will  describe  proof-structures  in  abstract  graph-theoretic  terms  in  section  (8.4). 

Links  in  a  proof  structure  can  be  represented  as  configurations  of  the  forms 
indicated  below.  The  formula-occurrence[s]  above  the  line  is  [are]  the  premise[s] 
and  the  formula-occurrence[s]  below  the  line  is  [axe]  the  conclusion[s)  of  the  link. 

Definition.  A  link  (represented  by  a  configuration)  of  the  form 

is  called  an  axiom  link.  Axiom  links  of  the  form 


P,PX,1,...,1  1,1,...,  _L  T.  Ad . A'„ 

axe  called  logical  axioms,  1  axioms  and  T  axioms ,  respectively.  Axiom  links  of  a 
different  form  will  be  cadled  non-logical  axioms. 
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A  link  (represented  by  a  configuration)  of  one  of  the  forms 

X  Y  X  Y  X  V  X  V  X  X 

X®Y  XuY  in  Y  X  ®  Y  X®Y  f\x.X  \Jx.X 

is  called  a  ®-,  U-,  IT,  ®-,  f\-,  \J-hnk ,  respectively,  in  accordance  with  the  outermost 
logical  symbol  in  the  conclusion.  A  binary  link  (represented  by  a  configuration)  of 
the  form 

D1  D" 

D 

where  D,  D'  and  D"  are  distinct  occurrences  of  the  same  formula,  is  a  Contraction 
link.  A  Cut  link  is  a  binary  link 

X  X x 


which  is  exactly  like  a  ®-link,  except  that  the  conclusion  X  (g >  X1-  cannot  be  a 
premise  of  any  link.  We  call  a  formula-occurrence  X  ®  X1-  a  ghost  formula- occurrence 

A  formula-occurrence  which  is  not  the  premise  of  any  link  is  a  lowermost  formula 
of  the  proof-structure.  The  lowermost  formula-occurrences  of  a  proof-structure  are 
either  conclusions  or  ghost  formula- occurrences.  We  write  CUT  for  the  set  of  all 
ghost  formula-occurrences  in  a  proof-structure.  We  sometimes  write  <SV5( A)  for  a 
proof-structure  with  conclusion  A  and  flagging  function  <p. 

Remark.  The  representation  of  the  cut  link  is  intentionally  ambiguous.  In  the 
propositional  multiplicative  fragment,  from  the  point  of  view  of  the  geometry  of  the 
proof-structure,  the  ghost  occurrence  behaves  exactly  as  a  real  formula-occurrence 
—  differences  occur  the  first  order  case  and  in  the  fragment  with  the  additives. 
However,  when  we  consider  a  proof-structure  as  a  representation  of  a  derivation, 
the  ghost  formula- occurrence  X  ®  XL  does  not  count  as  a  conclusions  of  the  proof- 
structure.  Girard  [1987b]  uses  instad  a  special  symbol  CUT,  which  is  not  a  formula. 
Whatever  convention  we  choose,  the  ambiguity  of  the  notation  is  meaningful  and 
suggestive,  as  a  mark  of  a  local  contradiction  and  a  temporary  instability  (see  Girard 
[1989a],  II. 8.:  “the  only  dynamical  figure  of  the  system  is  the  cut-rule;  without 
cut,  there  would  be  no  action  performed”). 

Definition.  Continuing  the  definition  of  proof-structure,  we  require 
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(3)  A  link  XXoY  is  different  from  the  link  YYoX  ■  The  axiom  link  Xi, . . . ,  X„  is 
identified  with  the  axiom  link  A'^j), . . . ,  Xa(n),  where  a  is  any  permutation. 

The  use  of  Contraction  links  in  a  structure  S  is  restricted  as  follows: 

(4)  The  flagging  function  associated  with  S  has  the  following  property.  For  each 
contraction  link 

D'  D" 

D 

there  is  a  n-link 

Xp  X i 

A'o  n  xx 

such  that  ‘f(D')  =  A,  and  </>(£>")  =  Ai_,,  for  i  =  0,1.  In  this  case  we  say  that 
D'  is  flagged  with  X{  and  D"  is  flagged  with  X\ We  also  put  ip(Xj)  =  Xj ,  for 

3=  0,1- 

Definition.  Proof-structures  for  the  following  fragments  are  defined  by  following 
restriction: 

(i)  A  proof-structure  for  propositioned  commutative  MLL~  contains  logical  axioms 
and  ®-,  LI-  and  cut  links. 

(ii)  A  proof-structure  for  propositional  commutative  MLL  contains  logical  and  1 
axioms  and  <g>-,  U-  and  cut  links. 

(iii)  A  proof-structure  for  propositional  commutative  MALL  in  addition  the  links 
of  MLL  contains  T  axioms  and  I"!-,  ©-  and  Contraction  links. 

(iv)  Proof-structures  for  the  corresponding  first-order  fragments  contain  in  addition 
/\-  and  V_^nks. 

(v)  The  above  fragments  are  extended  by  allowing  proof-structures  with  nonlogical 
axioms. 

The  premises  of  a  (non-axiom)  link  are  the  immediate  ancestors  of  the  conclu¬ 
sion  in  a  proof-structure.  The  relation  “...  is  an  ancestor  of  ...”  is  the  transitive 
closure  of  “...  is  an  immediate  ancestor  of ...” .  Symmetrically,  we  define  immediate 
descendant  and  descendant. 

Remark.  We  work  with  proof-structures  containing  only  finitely  many  formula- 
occurrences,  but  in  section  (1.1.4)  we  described  an  extension  of  our  methods  to  the 
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case  of  infinitary  proof-structures.  In  this  case  we  must  introduce  a  well-foundedness 
requirement,  e.g., 

Every  formula- occurrence  in  any  axiom  of  a  proof- structure  has  only  finitely  many 
descendants. 

Notation.  We  write  X  ~  X'  if  X  and  X1  are  different  occurrences  of  the  same 
formula.  We  write  X  -<  Y  if  X  is  an  ancestor  of  Y  in  a  proof-structure  S  and 
X  <  Y  if  X  is  an  ancestor  of  V  or  X  and  Y  are  the  same  formula-occurrence  in  S. 

3.1.  Inductive  Proof-Structures  for  MLL. 

A  class  of  proof-structures  is  defined  that  naturally  corresponds  to  the  class  of 
sequent  derivations  in  MLL. 

Definition.  The  class  of  inductive  proof- structure  for  first  order  MLL  is  the  small¬ 
est  class  closed  under  conditions  (1)',(2)  —  (5)  below. 

(i)  Kp1, 


(1) '  P,P±,  J-i,  • .  • ,  -L„  and  1,  _l_i, . . . ,  JL„ 

axe  inductive  proof-structures,  for  any  P. 

(2)  If  <S'(Ai, . . . ,  A„,  A)  and  <5"(J3,  B i  ,  Bm)  axe  inductive  proof-structures  and 
do  not  share  any  formule-occurrence,  then  S 

S'  S" 

Al , . . . ,  An ,  A  B  ,  B i  . . . ,  Bm 
A®  B 

is  an  inductive  proof-structure.  We  write  also  S'  a® B  S"  for  S . 

(2) '  Same  as  (2),  with  a  ghost  formula  X  ®  X 1  instead  of  A  ®  B. 

(3)  If  S'(  A\ , . . . ,  A„,  A,  B)  is  an  inductive  proof-structure,  then  S 

S' 

A] , . . . ,  An ,  A  B 
AUB 


is  an  inductive  proof-structure. 
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(4)  If  »S'(Ai , . . .  ,  An,  A(a))  is  an  inductive  proof-structure,  where  a  is  an  eigen- 
variable,  and  a  does  not  occur  in  A\,.  .  .,.4„,  but  may  occur  in  the  ghost  formula- 
occurrences,  then  S 

S' 

Ai,...,  An,  A(a) 

f\x.A(x ) 

is  an  inductive  proof-structure. 

(5)  If  S'(A\ , . . . ,  An,  A(/))  is  an  inductive  proof-structure,  where  t  is  any  term,  then 

5  5' 

Au...,An,  A(t) 

V  x.A(x) 

is  an  inductive  proof-structure. 

Definition  We  define  the  class  of  inductive  proof- structure  for 
propositional  MLL-  by  using  only  clauses  (1),  (2),  (3), 
propositional  MLL  by  using  only  clauses  (1)',  (2),  (3), 
first  order  MLL-  by  using  only  clauses  (l),(2)-(5). 

The  class  of  inductive  proof- structure  with  nonlogical  axioms  for  some  subsystem  is 
defined  with  the  addition  of  the  clause 

(0)  Xo,...,X„ 

is  an  inductive  proof-structure,  for  any  Xo,  • .  •  ,  Xn. 

3.2.  Inductive  Proof-Structures  for  MALL. 

Definition  An  inductive  proof- structure  (with  nonlogical  axioms)  in  propositional 
or  first  order  MALL  is  defined  as  for  MLL  with  the  addition  of  the  following 
specifications  and  of  clauses  (6)  and  (7): 

•  If  S  is  an  axiom,  then  the  flagging  function  ip  is  empty. 

•  In  case  (2)  the  flagging  function  of  S'^,  a®bS'v"  is  defined  by 


¥>(*)  = 


ip'iX)  axes'-, 

<p"(X)  othervise. 
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•  In  cases  (3)  —  (5)  the  flagging  function  of  S  is  the  same  as  the  flagging  function 
of  5'. 

(1)"  T,  Xi  ,  .  .  .  ,  A'n 


is  an  inductive  proof-structure,  for  any  J\Ti , . . . ,  Xn. 

(6)  If  <S'(A,  A)  and  S'(A,B)  is  an  inductive  proof-structure  with  flagging  function 
<p,  then 


S' 

A,  A 
A®B 


and  A,  B 
A®  B 


are  a  inductive  proof-structures  S  with  flagging  function  p. 

(7)  If  S'(A',A)  and  <S"(A" ,B)  are  inductive  proof- structures  that  do  not  share  any 
formula-occurrence,  and  A,  A'  and  A"  are  different  occurrences  of  the  same  sequence 
Di,  D2,. . .,  Dn,  let  5  be  S'  U  S"  U  A  U  {A  I"l  B }  with  the  addition  of  the  following 
links: 

D\  D"  D'n  D"n  A  B 
__  _  “Xn ~B~ 

Then  S  is  an  inductive  proof-structure.  Let  p\  and  ip  2  be  the  flagging  functions  of 
S' ,  S".  Define  < p  by 

(Vi{X)t  if  X$S'-, 

ifXtS"; 

)  |  A,  if  X  is  D[,  for  i  <  n,  or  if  X  is  A ; 

l  B,  if  X  is  D "  for  i  <  n ,  or  if  X  is  B. 


3.3.  Embeddings  and  Substructures. 

Definition,  (i)  Let  m  :  — >  S'^  be  any  map  of  proof-structures,  i.e.,  a  map  of  5 

and  S'  regarded  as  sets  (of  formula  occurrences),  m  is  said  to  preserve  the  links 


A  B 
C 


Pi,...,  Pn 


if  we  have 


m(A)  m(A)  m(B) 


m(B) 


m(C) 


m{Pi ),...,  m{Pn),Qu...,Qr 
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and  for  every  A',}'  G  Sv,  g>( A')  =  if  and  only  if  ip'(m(X))  =  m(i').  (Thus 
the  property  of  preserving  links  includes  the  condition  of  preserving  the  flagging 
function.)  We  say  the  rn  strongly  preserves  the  axiom  link  P\,...,Pn  of  S^,  if 
m(Pi ni(Pu  )  is  an  axiom  of  S^, .  Such  a  condition  guarantees  that  non-logical 
axioms  of  Sv  fire  sent  to  non-logical  axioms  of  iS^, . 

(ii)  An  injective  map  m  :  S  — +  S'  preserving  links  is  called  an  embedding  if  for  each 
A  €  S,  X  ~  m(X),  i.e.,  if  X  and  rn( X)  are  different  occurrences  of  the  same 
formula. 

Definition,  (i)  Let  S v  be  a  proof-structure.  A  proof-structure  S' ,  is  a  substructure 
of  Sy,  if  S',  C  as  sets  of  formula-occurrences,  and  the  identity  map  /  :  S'^,  — ►  Sy, 
strongly  preserves  axiom-links  and  preserves  links  and  the  flagging  function. 

Example.  Consider  the  following  proof-structure  Sy,,  where  c p  maps  the  left  premise 
of  the  Contraction  link  to  B  and  the  right  premise  to  A. 


1  1 

Bx  A 

A  B  AX®BX  Ax  ©  Bx 
A  n  B  Ax  ©  Bx 


Then  S'  =  {A,AX}  with  the  axiom  link  A,  Ax  is  a  substructure  of  S y,  and  so  is 
S"  =  { A,  Ax ,  B,  Bx  }  with  the  axiom  links  A,  A1-  and  B ,  Bx .  But  S'"  =  the  set  of 
conclusions  of  S'^,  with  axiom  link  AI15,  Ax  ®  is  not  a  substructure  of  Sv. 

Definition,  (continued)  (ii)  Let  S y,  be  a  proof-structure  and  let  S ' ,  be  a  substruc¬ 
ture  of  Sy  with  conclusion  A.  We  define  S y  as  follows.  The  formula  occurrences  in 
S y  iire  those  in 

au  (sv\s'v.y, 

the  links  of  S y  are  all  the  links  of  Sy  defined  on  such  a  set,  with  the  addition  of 
the  axiom  link  A,  where  A  is  the  set  of  conclusions  of  S'^,',  the  flagging  function  Tp 
of  Sy  is  the  restriction  of  <p  to  the  set,  in  question,  when  defined.  Then  S y  is  called 
the  substructure  of  Sy  complementary  to  S'^,. 
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Remark.  Notice  the  abuse  of  terminology:  the  substructure  of  Sv  complementary 
to  S' ,  fails  to  satisfy  the  condition  for  a  substructure  of  S since  the  axiom  A  is 
not  preserved. 

Fact.  If  is  the  substructure  of  S^,  complementary  to  S' ,( A),  then  the  result  of 
replacing  the  nonlogical  axiom  A  with  S'^,  is  S^.  ■ 

3.4.  The  Empire  of  a  Formula. 

The  notion  of  empire  is  defined  as  the  closure  of  an  inductive  definition  applied 
to  arbitrary  proof-structures  in  MALL. 

Let  S  be  a  proof-structure  in  the  language  Cl  without  exponentials. 

Definition.  The  empire  of  a  formula-occurrence  A  in  a  proof-structure  S  is  in¬ 
ductively  defined  as  follows  (cfr.  Girard  [1987b],  Definition  2.9.3  and  Facts  2.9.4, 
pag  37).  We  write  e(A)  for  the  empire  of  A. 

( * )  A  G  e(A); 

(ii)  for  any  non-axiom  link  in  S,  if  the  conclusion  of  the  link  is  in  e(A),  then  the 
premise[s]  of  the  link  are  in  e(A); 

(Hi)  for  any  axiom  (Ad , . . . ,  A„)  in  S  if  A,  G  e(A)  for  some  i  <  n ,  then  Xj  G  e(A) 
for  all  j  <  n; 

( iv )  for  every  one-premise  link  —  i.e.,  a  ©-,  f\-  and  \Mink  —  and  for  every  ©-link 
in  S  if  one  premise  of  the  link  is  different  from  A  and  belongs  to  e(A),  then  the 
conclusion  of  the  link  is  in  e(A); 

(v)  for  any  U-,  n-  and  contraction  link  in  S,  if  all  the  premises  of  the  link  are 
different  from  A  and  all  belong  to  e(A),  then  the  conclusion  belongs  to  e(A). 

Definition.  (Girard  [1987c],  II. 1,  remark  1).  Let  A  and  B  be  formula- 

occurrences  in  a  proof- structure  S.  A  is  the  main  door  of  e(A).  B  is  a  side  door 
of  e(A)  if  a  link  ®  occurs  in  S,  B  G  e(A),  B  A  and  C  (fc  e(A).  B  is  a  fake  door 
of  e(A)  if  B  G  e(A)  and  B  belongs  to  the  conclusion  of  <5.  A  formula-occurrence 
X  (g)  X1-  is  called  a  ghost  door  of  t(A)  if  A*  ®  A'-1  G  e(A). 

Remarks,  (i)  Clearly  a  side  door  must  be  a  premise  of  a  U-link  or  of  a  n-link  or 
of  a  contraction  link. 
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(ii)  As  pointed  out  in  section  (1.1.5),  the  doors  of  the  empire  of  a  formula  A  cor¬ 
respond  in  Natural  Deduction  to  the  (open  and  closed)  assumptions  relevant  to  A. 
For  this  reason  we  would  prefer  the  terminology  closed  door  and  open  door ,  for  side 
door  and  fake  door,  but  we  continue  to  use  Girard’s  terminology. 

Definition.  (Girard  [1987c]  II. 1,  Definition  2) 

A.0J3  means:  A  £  e(B)  and  B  £  e(A). 

AtZB  means:  A  G  e(B)  and  B  £  e(A). 

A()B  means:  A  G  e(23)  and  B  G  e(A). 

3.5.  Proof-Nets. 

Conditions  are  provided  that  characterize  proof-nets,  the  proof-structures  that 
represent  correct  reasoning  in  the  fragments  of  Linear  Logic  under  consideration. 

Let  S  be  a  proof-structure  for  first  order  MALL  with  conclusion  T  and  flagging 
function  <p. 

Let  f\  x.A(x)  and  f\  y.B(y)  be  the  conclusions  of  two  /\-links  in  5  with  eigen- 
variables  a  and  b ,  respectively.  We  define  the  ordering  <°  by 

Definition.  (Girard  [1987c]  II. 3,  definition  4 )  a  <°  b  if  and  only  if  the  eigenvan- 
able  b  occurs  outside  and  inside  e(A(a)). 

Let  <t  be  the  transitive  closure  of  <°. 

The  vicious  circle  condition  (i.e.,  the  condition  preventing  any  vicious  circle)  is  the 
property 

If  A  and  B  are  the  premises  of  a  ®-link  then  A§B. 

The  connectedness  condition  is  the  property 

If  A  and  B  are  either  (1)  among  the  conclusions  or  the  ghost  formula- occurrences 
of  S ,  or  (2)  the  premises  of  a  L) -link,  then  A()B. 

The  box  condition  is  the  property 

If  A  and  B  are  the  premises  of  a  n -link,  then  the  main  door  and  the  side  doors 
of  e(A)  [e(B)]  are  exactly  the  formula  occurrences  flagged  with  A  [£]. 

The  parameters  condition  (cfr  Girard  [1987c],  II. 3  Theorem  2)  is  the  property 
The  ordering  <*  is  strict. 
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Definitions,  (i)  A  proof-structure  S  with  conclusion  T  in  the  propositional  [first 
order]  fragments  MLL~  or  MLL  is  a  proof-net  if  it  satisfies  the  vicious  circle  and 
connectedness  [and  parameter]  conditions. 

(ii)  A  proof-structure  5  with  conclusion  T  and  flagging  function  p  in  the  proposi¬ 
tional  [first  order]  fragments  MALL  is  a  proof  net  if  it  satisfies  the  vicious  circle, 
connectedness,  box  [and  parameter]  conditions. 

3.5.1.  Some  Examples. 

(1)  The  following  proof-structure  violates  the  vicious  circle  condition: 


A 


B 

A 

1 

£x 

Ax 

Jx 

A 

± 

B 

A®  B 


A®BX  Ax  <g>  Bx 


Ax  ®  B 


(2)  The  following  proof-structure  is  a  proof-net: 


a 


A±  B- 


Bx 


B 


£x  AXUA- 


BiUBi  Ax 


B 


B 


A®  B 


A®  B- 


(Ax  U  A±)®{B±  UB1)  A±®B 


A®  B 


♦ 


(3)  The  following  proof-structure  violates  the  connectedness  condition 


P.P1-,  Q,QX- 
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(4)  The  proof-structure  with  the  conclusion 

t-  Pi  ®  Qi,P2  <®  (?2,  (Qi  L-l  P2X)  ®  (Qi-  LJ  Px  U  Rx),  R®  S, 

(Sx  u  Qi-  U  P3X)  ®  {Qf  U  Px),  P3®Q3 ,  P4  ®  Q4 

and  with  the  axiom-links 


Pi.PfS  QuQi,  P2,P2\  Q2,Q2x,  Px,P,  5,5-l,  Px,P3,  qx,q3,  p4x,p4,  Q4x,Q4 


also  violates  the  connectedness  condition. 

(5)  The  following  proof-structure  violates  the  parameters  condition: 


Aia)-1  Px  A(a) 

A(a)xUPx  A  V-A{y)  B 

\J x.(A(x)x  Li  Bx)  (A y-A(y))®B 

since  A(a)x  U  Bx  ^  e(A(a)),  hence  a  <°  a. 

(6)  Let  B  and  E  be  0-ary  predicates  and  let  A,  C,  D  be  unary  predicates,  The 
proof-structure  with  conclusions 

V  x.(A(r)x  U  Px),  B®/\v.\J  x.{C(v)  ®  D(x)) , 

(f\y.D(y)x  ®A(y))  ®E,  \J  x.(Ex  U  C(r)x), 

and  with  the  axiom-links 

A(y)x,A(y),  B\B,  C(v),  C(u)x,  P(y),D(y)x,  E^. 

violates  the  parameters  condition.  Here  v  jt0  v  and  y  <£°  y,  but  v  <°  y  and  y  <°  v. 

(7)  Let  A,...,E  be  as  in  (6).  The  proof-structure  with  conclusions 

V  *•  Ui1),  B  ®  [\v.\j  x.(C(v)®  D(x)) , 

(A  y-D(y)x®My))®E,  elu(\J  x.C(x)1) 

and  with  the  same  axiom-links  as  (6)  is  a  first  order  proof-net.  The  parameters 
condition  is  satisfied,  since  v  <°  y  and  y  v. 
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3.5.2.  Boxes  and  other  Alternative  Conditions. 

In  Girard  [1987b],  Definition  2.14.  and  Section  2.4.,  the  notion  of  proof- 
structure  with  proof-boxes  is  introduced.  Boxes  are  described  as  “synchronization 
marks  in  the  proof-net”.  In  our  terminology,  a  proof- structure  with  proof-boxes  can 
be  defined  as  follows. 

Definition.  A  proof- structure  with  proof-boxes  is  a  set  S  =  {iSj , . . . ,  Sn }  of  proof- 
structures  <S,  with  non-logical  axioms  and  with  no  flagging  function,  together 
with  a  set  of  relations  R,  where  each  71  6  R  is  a  relation  of  the  form  7^(1”;  T]) 
or  7£(F;  lb ;  I^),  and  r,Fi,r2  are  multisets  of  formula-occurrences.  We  write  some¬ 
times  7l(F;  Fi;  T2),  since  7 Z  relates  the  non-logical  axiom  T  of  some  proof-structure 
with  the  multiset(s)  of  conclusions  of  some  other  jroof-structure(s).  Let  <  be  the 
binary  relation  on  S  defined  by 

S  ◄  °S'  if  and  only  if  for  some  7Z  £  R  and  some  F,  T] ,  F2,  we  have  either  7Z(T’,  T \ ) 
or  7c(r;  Tj ;  F2  ),  and  moreover  T  is  a  non-logical  axiom  of  S ,  and  for  i  =  1  or  2,  T, 
is  the  multiset  of  conclusions  of  S' . 

S  and  R  must  satisfy  the  conditions  that 

(i)  if  Si,S}  €  S  with  i  ^  j,  then  Si  and  S}  share  no  formula-occurrence; 

(ii)  if  7£(r;Fi)  or  7£(r;  Tj ;  T2),  then  T  is  a  non-logical  axiom  of  a  proof-structure 
S  €  S  and  for  each  i  <  2,  T,  is  the  multiset  of  the  conclusions  of  some  proof-structure 
Si  €  S  —  i.e.,  S  ^ 

(iii)  for  each  proof-structure  S  €  S  and  each  .non-logical  axiom  T  €  S,  there  are  Ti, 
r 2  and  71  6  R  such  that  7£(T;  Ti )  or  7£(r;  Ti ;  T2); 

(iv)  the  transitive  closure  ◄  of  ◄  0  is  a  strict  partial  ordering  on  S. 

The  following  boxes  are  introduced  in  Girard  [1987b]:  _L-boxes,  n-boxes,  f\- 
boxes,  Weakening-boxes  and  !-boxes.  Each  one  of  such  boxes  can  be  defined  as  a 
relation  7JfR,  where  the  multisets  in  the  relation  have  a  certain  form,  as  specified 
in  the  following  list. 

(1)  ftx(r7I;r). 

(2)  7Zn(T,AnB-T,A-J,B). 

(3)  7£v(r,  /\  X.A]  r,  .4(g)),  where  a  does  not  occur  in  T. 
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(4)  ft?w(r,?j4;r). 

(5)  7^.t (T,  \A ;  T,  A ),  if  all  the  formula-occurrences  in  P  are  either  _L  or  have  the  form 

IB. 

Definition.  A  proof- structure  with  proof-boxes  (S,R)  is  a  proof-net  (with  proof- 
boxes),  if  every  proof-structure  in  S  in  a  proof-net  (possibly  with  non-logical  ax¬ 
ioms). 

The  task  of  eliminating  boxes  is  described  in  Girard  [1987b]  ,  section  6.  Girard 
[1987c]  accomplishes  the  elimination  of  the  /\-box.  In  our  treatment,  boxes  for 
_L,  n  and  f\  are  replaced  by  relationships  beween  empires.  The  detail  will  become 
apparent  from  the  proof  of  the  Sequentialization  Theorem  for  Propositional  MLL, 
MALL  and  for  First  Order  MALL. 

3.6.  Structure  Theorem  for  Propositional  MALL. 

A  proof  is  given  that  inductively  defined  proof-structures  are  proof-nets. 

Facts.  Let  S  be  a  proof- structure  in  first  order  MALL  of  the  form 

Si  S2 

n  A _ B  A 

A®B 

where  S\  and  S2  share  no  formula- occurrences. 

(i)  If  X  &  Si  [or  X  €  £2]  and  A  0  B  £  e(A),  then  S2  D  e(X)  =  0  [or  Si  (T  e{X)  =  0]. 

(ii)  For  i  =  1,2  and  for  all  A,  Y  €  Si,  Y  £  e(X)  in  Si  if  and  only  if  Y  6  e(X)  in 
S. 

Proof.  Notice  that  the  indicated  link  is  the  only  connection  between  S\  and 
( i )  follows  immediately  from  this  remark,  (ii)  Suppose  A  ,  Y  <E  <Sj  and  consider  any 
computation  of  Y  €  e(A').  If  such  computation  reaches  a  formula  in  S2  then  it 
must  exit  and  re-enter  Si  through  A.  Hence  the  part  of  the  computation  involving 
formulas  outside  can  be  omitted.  ■ 

Lemma.  Let  S ^  be  an  inductive  proof- structure  with  conclusion  T  in  first  order 
MALL.  If  A,  B  are  in  T  U  CUT,  then  e(A)  =  S^  =  e(B). 

Proof.  By  induction  on  the  definition  of  S.  If  A  and  B  belong  to  an  axiom  link, 
then  the  result  is  immediate. 
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If  S  results  from  S i  and  S2  by  an  application  of  clause  (2),  then  S  has  the  form 

S\  S 2 

C\ , . . . ,  Cp ,  C  D  D\ , ... ,  Dq 

C  ®D 

and  by  induction  hypothesis  we  have  e(Ct)  =  Si  =  e(C)  and  e(Dj)  =  S?  =  c(D). 
Clearly  in  S  we  still  have  e(C)  C  e(C,)  and  e(D)  C  t{Dj).  In  addition,  by  induction 
on  e(C)  we  obtain  e(C)  C  e(C  ®  D)  and  e(C)  C  e(D3)\  also  by  induction  on  e(D ) 
we  obtain  e(D)  C  e(C  ®  D)  and  e(D )  C  e(Ct).  In  conclusion, 

5  =  e(C)  U{C®D}U  e(D)  =  e(C.)  =  e(C  0  D)  =  e(D;). 

If  5  results  from  by  an  application  of  clause  (3)  —  (6)  then  the  result  is 
immediate  from  the  induction  hypothesis. 

If  S  results  from  S\  and  S2  by  an  application  of  clause  (7),  then  S  is  53  U  S2 
with  the  additional  links 

C\  C';...C'p  C"  C  D 
Cj  ...  Cp  CnD 

and  by  induction  hypothesis  we  have  e(C')  =  S 1  =  e(C')  and  e(C")  =  <^2  =  e(Z7). 
Clearly  in  5  we  still  have  C  e(C),  C  e(C'),  <S2  C  e(D)  and  S2  C  e(C"),  for 
hj  <  p.  In  addition  in  <5  by  induction  on  e(C')  we  obtain  e(C')  C  e(C<);  also  by 
induction  on  e(C”)  we  obtain  e(C,")  C  e(Ci),  thus  Ci, . . . ,  Cp,  C  n  D  €  e(C,),  by 
clause  (v)  in  the  definition  of  empire.  Hence 

<5  =  U  {Cj,..., Cp, C n  D}  U  S2  —  e(C,). 

Similarly  we  show  that  <S  =  e(C  n  Z?).  ■ 

Structure  Theorem.  If  S v  is  an  inductive  proof- structure  for  MLL  ,  MLL  or 
MALL  then  it  a  proof-net. 

Proof.  We  argue  by  induction  on  the  definition  of  S  and  we  use  the  notation  of 
the  previous  Lemma. 

(i)  (  Vicious  Circle  condition).  We  inductively  provp  e(A)De(H)  =  0,  which  implies 
the  condition.  Let  A  be  B  are  premises  of  a  ®-link.  Suppose  S  is  obtained  from  S\ 


62 


Section  3 


and  S2  by  an  application  of  clause  (2).  The  proof-structures  Si  and  S2  associated 
with  the  immediate  subderivations  satisfy  the  vicious  circle  condition  and  do  not 
share  any  formula-occurrence  and  the  link 

C  D 
C®D 

is  the  only  connection  between  S\  and  S2  in  5. 

Let  A  E  iSi  —  if  A  E  S2,  the  argument  is  similar.  Let  X  be  a  formula  occurrence 
X  in  c>2.  If  X  E  e(A),  then  by  the  Fact  (i)  above  C  ®  D  E  e(A).  Also  the 
first  step  in  the  computation  of  e(A)  reaching  a  formula  occurrence  outside  Si 
must  be  an  application  of  clause  (iv)  in  the  definition  of  empire,  to  conclude  that 
C®D=A®Be  e(A)  from  the  fact  that  C  E  e(A). 

If  on  the  one  hand  A  is  C,  then  this  step  is  not  admissible,  so  e(A)  fl  S-p 2  = 
0.  Moreover  in  this  case  B  is  D  and  for  the  same  reason  e(B )  H  St>1  =  0,  thus 
e(A)  n  e(B)  =  0. 

If  on  the  other  hand  A  is  different  from  C,  then  A®  B  is  also  in  Si  and  by 
induction  hypothesis  e(A)  fl  e(B)  =  0  in  5j ,  in  particular,  C  6  e(A)  if  and  only  if 
C  £  e(B).  By  Fact  (ii)  above,  the  same  holds  in  S.  Therefore  the  step  from  C  to 
C  ®  D  cannot  be  available  simultaneously  in  a  computation  of  e(A)  and  of  e(B). 

If  S  is  obtained  by  an  application  of  clauses  (3)— (6)  then  the  result  is  immediate 
from  the  induction  hypothesis.  Finally,  if  S  is  obtained  by  an  application  of  clause 
(7),  then  the  result  follows  from  the  induction  hypothesis  and  the  box  condition 
proved  below. 

(ii)  ( Connectedness  condition).  We  inductively  prove  e(A)  =  e(B),  which  implies 
the  condition.  The  above  Lemma  yields  the  result  if  A  and  B  are  elements  of  T. 
Let  A  and  B  be  the  premises  of  a  U-link. 

Suppose  S  is  obtained  from  5i  and  S2  by  an  application  of  clause  (2)  and  that 
A  U  B  occurs  in  5]  —  if  A  U  B  occurs  in  52,  then  the  argument  is  similar. 

By  induction  hypothesis  e{A)  =  c(B)  in  5j,  in  particular,  C  E  c(A)  if  and  only 
if  C  E  e(B).  By  Fact  (ii)  above,  the  same  holds  in  5. 

It  follows  that  in  S ,  C ® D  E  e(A)  if  and  only  if  C®D  E  e(f?)  and  by  induction 
on  e(D),  for  all  X  in  S2,  X  E  e(A)  if  and  only  if  X  E  t(B).  We  conclude  that 
e(A)  =  e(B)  in  5  too. 


Section  3 


63 


If  5  is  obtained  by  an  application  of  clauses  (3)  — (6)  then  the  result  is  immediate 
from  the  induction  hypothesis.  Finally,  if  the  last  inference  is  a  n-rule,  then  the 
result  follows  from  the  induction  hypothesis  and  the  box  condition. 

(iii)  ( Box  condition).  The  cases  when  S  results  from  an  application  of  clauses 
(1)  —  (6)  is  straightforward. 

Suppose  <S(r)  results  from  Si(r')  and  52(F")  by  clause  (7)  where 


r  =  c;,...,c,c,  ,r"  =  c",...,c",.D,  r  =  c1,...,cm,cni> 

and  Cl  ~  C,  ~  C" .  Moreover,  Si(r')  and  ^(T")  do  not  share  any  formula- 
occurrence,  hence  the  □-  and  Contraction  links 

C  D  Cl  Cm  Cl 

C  n  D  Cl  ’  "  '  ’  Cm 

are  the  only  links  in  S  connecting  Si  and  S2  ■ 

By  induction  hypothesis  «Si(F')  and  S2{T"),  satisfy  the  box  condition.  We  need 
to  show  that  in  S  the  formulas  in  P  are  all  the  doors  of  e(C)  and  the  formulas  in 
T"  are  all  the  doors  of  e(D).  This  follows  from  the  connectedness  condition  for  Si 
and  S2  and  from  the  following  fact. 

Fact:  In  S  for  all  Y  €  T,  Y  <£  e(C)  and  Y  £  e(D). 

Let  Y  €  r,  suppose  Y  €  e(C)  and  consider  a  computation  of  Y  €  e(C).  Since 
Y  $  Si,  the  computation  must  exit  <Si  first  through  a  link  where  Vi  belongs 

to  Si .  and  W  belongs  to  S2 ■  Since  the  link  in  question  is  either  afl-ora  contraction 
link,  we  must  infer  Z  €  e(C)  from  V  6  e(C)  and  W  €  e(C)  by  an  application 
of  clause  ( v )  in  the  definition  of  empire.  But  W  £  Si  and  this  contradicts  the 
assumption  that  Z  is  the  first  formula-occurrences  outside  Si  to  be  reached  in  the 
computation. 

(iv)  ( Parameters  condition )  We  need  to  show  that  every  inductive  proof-structure 
can  be  transformed  into  one  satisfying  the  following  property  (cfr.  the  pure  param¬ 
eter  property  in  sequent  calculi): 

Pure  Parameter  Property.  Suppose 
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is  a  link  of  S^{ T).  Then  a  does  not  occur  in  the  conclusions  of  S. 

Assuming  the  Pure  Parameter  property,  we  prove  the  parameters  condition.  All 
the  propositional  clauses  (1)  —  (3),  (6)  —  (7)  and  also  clause  (5)  are  easy.  Suppose 
Sv  is  obtained  from  S' ,  by  an  application  of  those  clauses.  By  the  Pure  Parameter 
Property  we  may  regard  all  eigenvariables  occurring  in  the  conclusion  of  S ',  as 
special  constants;  thus  the  <*  relation  is  the  same  in  S \p  and  in  S'^, . 

Suppose  that  Sv  results  from  S' ,  by  an  application  of  clause  (4)  introducing  a 

link 

B{b) 

A  x.B{x). 

Let  <'t  be  the  transitive  closure  of  the  relation  <°  defined  over  S ' By  induction 
hypothesis,  <'t  is  strict.  We  need  to  show  that  if  <t  is  the  transitive  closure  of  the 
relation  <°  defined  over  Sv,  then  <t  is  strict.  Since  a  /\-link  is  unary,  all  the  empire 
relationships  between  formulas  different  from  B(b)  and  / \x.B(x )  are  the  same  in 
S'^,  and  in  Sv.  Therefore  to  show  that  <*  is  strict,  it  is  enough  to  show  that  we 
cannot  have  a  <t  b  <°  a,  for  some  a.  By  part  (n),  S ' ,  C  e(B(b)).  By  the  pure 
parameter  property,  if 

M*) 

A  x.A(x) 

is  a  hnk  in  S'^,,  then  a  does  not  occur  in  B(b)  and  in  f\  x.B(x).  Therefore  we  cannot 
have  b  <°  a  in  <SV,  and  <t  is  strict.  To  finish  the  proof  of  the  theorem  we  need  to 
guarantee  the  Pure  Parameters  Property  for  any  inductive  proof-structure. 

If  S  results  from  an  application  of  clause  (4),  introducing  a  new  link 

*(q) 

f\x.A(x ), 

then  the  restriction  on  a  yields  the  desired  property.  The  property  is  preserved  by 
clauses  (3)  and  (5).  At  any  application  of  clauses  (2)  and  (7)  we  must  guarantee 
that  every  eigenvariable  b  occurring  in  the  conclusions  of  S'  is  different  from  all 
eigenvariables  a  occurring  in  the  premise  of  any  /\-link  of  S"  (and  viceversa).  If 
a  =  b,  we  may  rename  the  eigenvariable  b.  The  renaming  is  possible,  since,  by 
induction  hypothesis  a  does  not  occur  in  the  conclusions  of  S" .  A  similar  argument 
applies  if  <5  results  by  an  application  of  clause  (6).  ■ 
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3.7.  A  map  from  Derivations  to  Proof-Nets. 

A  map  is  given  from  derivations  to  inductively  defined  proof-structures  for  the 
fragments  of  LL  under  consideration. 

The  proof  of  the  following  lemma  is  straightforward  from  the  remark  that  we 
can  always  permute  an  application  of  the  1-rule  above  any  other  inference  (including 
the  !-rule). 

Lemma.  Every  derivation  T>'  in  LL  can  be  transformed  into  a  derivation  T)  where 
above  every  application  of  the  1  -rule  there  is  either  an  axiom  or  another  application 
of  the  1  -rule.  ■ 

Definition.  Let  T>  be  a  derivation  of  b  T  in  propositional  or  first  order  (z)  MLL-, 
(iz)  MLL,  (Hi)  MALL  By  induction  on  the  length  of  V  we  construct  an  inductive 
proof -structure  Sp  associated  with  T>  with  conclusion  T  and  a  many-to-one  map 
7r  :  T>  — ♦  Sp  sending  formula-occurrences  of  T>  to  formula-occurrences  of  S ,  active 
and  principal  formulas  of  a  o-  rule  of  T>  to  premises  and  conclusion  of  a  o-link  in 
Sp. 

Propositional  fragments,  case  (z):  in  correspondence  to  a  logical  axioms,  to  the 
<g)-rule  and  to  the  U-rule,  we  use  clauses  (1),  (2)  and  (3)  respectively.  The  same 
proof-structure  corresponds  to  the  premise  and  to  the  conclusion  of  an  application 
of  the  Exchange  rule. 

case  (ii):  first  we  apply  the  above  Lemma  and  then  we  use  clause  (1)',  in  correspon¬ 
dence  to  a  1-  or  logical  axiom  followed  by  a  sequence  of  application  of  the  1-rule. 
The  other  rules  axe  handled  as  in  case  (i). 

case  ( iii ):  in  correspondence  to  the  T-axiom  we  use  clause  (1)";  in  correspondence 
to  the  ©-rule  and  the  (l-rule  we  use  clauses  (6)  and  (7),  respectively.  The  other 
rules  are  handled  as  in  case  (n). 

First  order  fragments,  cases  ( i )  —  ( iv ):  in  correspondence  to  the  f\-  and  \/-rule  we 
use  clauses  (4)  and  (5),  respectively.  The  other  axioms  and  rules  are  handled  as  in 
the  propositional  cases. 
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4.  Main  Theorem. 


Structure  Theorem.  If  “D  is  a  derivation  of  h  T  in  MLL  ,  MLL  or  MALL 
then  we  can  associate  with  T>  a  proof-net  St>  with  conclusion  T. 

Sequentialization  Theorem.  If  S  is  a  proof-net  with  conclusion  F  for  MLL-, 
MLL,  or  MALL  then  we  can  find  a  derivation  T>  of  h  T  in  the  corresponding 
fragment  such  that  the  associated  proof-net  St>  is  S. 

The  above  form  of  the  Structure  Theorem  follows  from  the  more  general  The¬ 
orem  in  section  (3.6)  by  the  map  n  defined  in  section  (3.7).  The  sections  (4.1  -  4.6) 
are  devoted  to  the  proof  of  the  Sequentialization  Theorem. 

4.1.  Computations  of  the  Empire  of  a  Formula. 

The  inductive  definition  of  empire  allows  us  to  make  arguments  by  induction 
on  the  definition  of  empire  of  some  formula.  In  addition,  we  will  need  the  fact  that 
the  empire  of  some  formulas  can  be  computed  only  in  a  certain  way.  Therefore,  it  is 
desirable  to  provide  a  formal  description  of  the  computation  of  (or  search  through) 
the  empire  of  a  formula  in  a  structure.  The  inductive  trees  considered  below  are 
easy  instances  of  Inductively  Presented  Systems,  extensively  studied  in  Feferman 
[1982]. 

An  algorithm  computing  e(A)  in  S  consists  of  a  succession  of  steps  through 
the  links  of  S  corresponding  to  applications  of  clauses  ( i )  —  (u)  in  the  definition  of 
empire. 

(i)  Start  at  A\ 


* 


A',  5*  A.i  =1.2. 
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where  o  is  either  0  or  U  or  (1  or  ®  and  Q  is  either  (\  or  \j .  A  step  ^  differs  from  the 
others  since  its  performance  depends  on  a  condition,  namely  that  both  .Ai  and  Xz 
have  been  already  reached  in  the  computation.  Thus  the  computation  of  the  empire 
of  A  consists  of  sequences  of  steps  (i)  —  (v)  that  axe  available  given  the  form  of  S 
and  that  are  admissible  according  to  the  definition  of  empire.  (Sometimes  we  write 
(To)>  (lo)  and  (!)•),  if  the  step  is  across  a  o-link.)  We  define  the  tree  of  admissible 
empire-sequences  r^A j  from  A  to  B  as  follows.  Every  node  in  is  labeled  with  a 
formula-occurrence  of  S  and  every  edge  is  identified  with  one  of  the  steps  ( i )  —  (v) 
above.  The  root  of  is  labeled  by  B  and  the  leafs  are  labeled  by  A  (we  think  of 
as  ‘growing  downwards’).  V  is  used  here  for  concatenation  of  sequences. 

Definition.  (I)  The  sequence  (A)  is  a  tree  r^; 

(II)  if  r^j  is  a  tree  of  admissible  empire-sequences,  ‘  y1  is  any  fink  in  S,  then  the 
result  of  extending  every  empire-sequence  a  of  to  a*  ( X, )  is  a  tree  of  admissible 
empire-sequences  (step  (f1)). 

(III)  if  tya j  is  a  tree  of  admissible  empire-sequences  and  Y  and  X  are  the  j-th 
and  the  k-th  elements  of  an  axiom,  respectively,  then  the  result  of  extending  every 
empire-sequence  a  of  t^j  to  a  *  (X)  is  a  tree  of  admissible  empire-sequences 

(step  (,d )); 

(IV)  if  is  a  tree  of  admissible  empire- sequences,  -  ^ "  is  a  ®-link  or  a  one- 
premise  link,  where  Y  ^  A  and  Y  is  the  i-th  premise,  then  the  result  of  extending 
every  empire- sequence  a  of  to  a  *  (A')  is  a  tree  of  admissible  empire-sequences 
t[a\  (steP  (•!•’)); 

(V)  let  r^j  and  r^j  be  a  trees  of  admissible  empire-sequences  with  Y\  A  Yz\  if 

Yl^r'1  is  a  n-link  or  a  U-hnk  or  contraction  link,  let  be  the  result  of  extending 
every  empire-sequence  a  of  t^j  to  a*  (X).  Then  the  union  of  r1^  and  t2^j  is  a 
tree  of  admissible  empire-sequences  ( step  (-D1)). 

Remark.  B  €  e(A)  if  and  only  if  there  is  a  tree  of  admissible  empire-sequences 
t[a]  fTOm  A  to  B. 

The  nodes  of  r^  are  labeled  with  formula-occurrences  in  S  and  the  same 
formula-occurrence  may  appear  several  times  in  it  as  a  part  of  different  subcompu¬ 
tations. 
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We  want  a  normal  form  for  computations.  The  following  transformations  con¬ 
stitute  reductions  on  a  tree  of  admissible  empire-sequences.  Let  r^j  be  such  a  tree. 

(1)  A  pairs  of  successive  steps  (~*)  (~fk )  in  can  be  replaced  by  a  single  step  (~). 

(2)  If  one  formula-occurrence  X  in  S  labels  two  nodes  within  the  same  empire- 
sequence,  let  r'j^i  and  r"^  be  the  subtrees  of  r.®.  which  represent  the  subcompu¬ 
tations  ending  with  the  first  and  the  second  passage  through  X .  Then  the  result  of 
replacing  t"[a]  with  t'\a]  iR  r[^]  is  a  tree  t'[a]  admissible  empire  sequences. 

Definition,  (i)  An  empire-sequence  is  pure  if  all  its  nodes  are  labeled  with  different 
formula-occurrences  in  S. 

(ii)  A  tree  r  is  normal  if  every  empire-sequence  in  it  is  pure. 

Each  one  of  the  above  reductions  reduces  the  size  of  the  tree.  If  is  finite,  then 
after  a  finite  number  of  reductions  we  obtain  a  normal  r'r^j. 

4.1.1.  Elementary  Properties  of  the  Empire  of  a  Formula. 

The  following  properties  follow  immediately  from  the  definition  of  empire. 

Quasi- Transitivity  Lemma.  Let  B  €  t(A)  and  C  €  e(£).  If  m  some  computa¬ 
tion  of  C  €  e(B)  there  is  no  step  of  the  form  (j)  or  (H)  through  A  for  some  Z,  then 
C  €  e(A). 

Proof.  Let  represent  a  computation  that  B  €  e(A).  If  C  occurs  in  then 
a  computation  of  C  €  e(A)  is  represented  by  the  subtree  t'\a\  °f  t[a]->  i-e->  the  tree 
whose  top  node  is  labeled  by  the  occurrence  of  C  in  question. 

Suppose  C  does  not  occur  in  r^j.  If  t^b j  represents  a  computation  of  C  €  e(B) 
with  the  prescribed  property,  then  the  result  of  replacing  each  bottom  node  (leaf) 
of  with  a  copy  of  represents  a  computation  of  C  €  e(A).  ■ 

Corollary.  If  BdA,  then  e(B )  C  e(A).  ■ 

We  will  use  the  Corollary  without  mention. 

Proposition.  Let  r^j  be  a  normal  tree  of  admissible  empire-sequences  through  S. 

(i)  If  B  A  and  the  last  step  in  r^j  is  of  the  kind  (f),  then  there  is  a  a  formula- 
occurrence  C  —  C\  ®  C2  such  that  B  -<  C  and  every  empire -sequence  in  t ^  ends 
with  a  pair  of  steps  (T®)^  w*tA  j  ^  i,  followed  by  a  sequence  of  steps  of 
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the  form  (I).  E.g.,  in  the  case  C  =  C\  ®  C2  and  B  -<  C2  the  computation  proceeds 
as  follows: 

B 


(T) 


(ii)  If  the  last  step  in  is  of  the  kind  (J.)  or  (JJ-),  then  for  every  branch  of 
there  exists  a  formula- occurrence  X  belonging  to  an  axiom  link  such  that  X  -<  B 
and  after  the  node  X  the  branch  ends  with  a  sequence  of  steps  of  the  kind  (J.)  or 
(1J.).  I.e.,  the  computation  has  the  form 

•  ■  •  Y^X  •  •  • 

i  (14) 

B 

Proof,  (i)  Consider  any  empire-sequence  7  of  r^.  If  all  steps  of  7  were  of  the  form 
(T),  then  for  all  formula  X  reached  by  7  we  would  have  B  -<  Ar,  thus  also  B  -<  A. 
Consider  the  last  step  of  7  which  is  not  of  the  form  (f)  and  let  C  be  the  formula 
reached  by  this  step.  C  cannot  belong  to  an  axiom,  because  after  an  axiom  we 
cannot  have  a  step  (f).  If  C  was  C\  (&C2,  f\x.C\  or  \J x.C\,  then  7  would  contain 
two  successive  steps 

U‘)  §  (D 

reaching  twice  the  same  formula-occurrence  C,  of  S.  Suppose  C  is  Cj  U  C2,  Cj  n  C2 
or  a  premise  of  a  contraction  link.  Then  in  there  is  an  empire-sequence  7' 
containing  two  successive  steps 

on  §  (f) 

reaching  twice  the  same  formula-occurrence  C,  of  S.  Therefore  C  is  C\  ®C2  and  the 
steps  before  and  after  the  node  C  have  the  form  (j.^)  (|®)  with  i  j ,  as  required. 

(ii)  For  all  empire-sequences  7,  not  all  steps  of  7  are  of  the  form  (J.)  or  (fl),  since 
form  A  we  can  only  have  a  step  (f)  or  (~ ).  For  any  7,  consider  the  last  step  which 
is  not  of  the  kind  (J.)  or  (!]•).  By  an  argument  similar  to  that  of  part  (i)  this  step 
can  only  be  of  kind  ( T  )•  If  A”  is  the  element  of  the  axiom  link  reached  at  the  end 
of  this  step,  then  X  ~<  B,  as  required.  ■ 
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4.2.  Consequences  of  the  Vicious  Circle  Condition. 

Properties  of  the  relation  C  are  considered  in  structures  that  satisfy  the  basic 
consistency  requirement  ( vicious  circle  condition). 

Proposition.  Let  S  be  any  proof- structure  satisfying  the  vicious  circle  condition. 

(i)  Let  C  be  C\  ®  C2,  the  conclusion  of  a  link 

Cl  c2 

Ci  ®  C2. 

If  for  some  normal  computation  of  C  €  e(A)  the  last  step  in  does  not  have  the 
form  (fg,),  then  C.CA. 

(ii)  If  B  -<  A,  then  B\ZA. 

(iii)  If  for  some  normal  computation  of  B  £  e(A)  the  last  step  in  has  the  form 
(t)  then  BH A. 

Proof.  ( i )  If  is  a  normal  tree  satisfying  the  assumption,  then  no  step  in 
has  the  form  (|)g,  through  —%—■  Clearly  C,  €  e(A),  for  all  1.  If  A  €  e(Ct),  then 
by  the  Quasi-Transitivity  Lemma  (Section  4.1.1)  Cj  €  e(C,)  for  j  ^  i,  contradicting 
the  vicious  circle  condition.  Thus  CiCA. 

(ii)  Assuming  B  ~<  A,  B  £  e(A)  is  clear.  Assume  A  €  e(B).  The  following  fact  can 
be  easily  proved  by  induction  on  the  logical  complexity  of  X : 

Fact.  If  X  is  a  formula- occurrence  such  that  B  -<  X  and  for  no  multiplicative 
conjunction  C  we  have  B  -<  C  X ,  then  no  normal  computation  of  X  £  t(B)  can 
end  with  a  step  (J.)  or  (I)) 

If  on  one  hand  no  normal  computation  t^j  ends  with  a  step  (T),  then  there  is 
a  multiplicative  conjunction  C,  with  B  -<  C  -<  A  and  since  A  €  e(P)  we  have  also 
C  €  e(B). 

If  on  the  other  hand  the  last  step  of  a  normal  computation  r^  ends  with  a 
step  (f),  Then  since  A  -ft  B,  we  can  apply  part  ( i )  of  the  Proposition  in  Section 
(4.1.1)  and  find  a  multiplicative  conjunction  C  with  A  X  C  and  C  €  e(B). 

Thus  we  may  choose  C  to  be  the  smallest  (with  respect  to  -;)  multiplicative 
conjunction  such  that  B  <  C  and  C  £  e(B),  say  C  =  C\  and  B  <  C 2.  Clearly, 
B  £  e(C2)  and  C\  €  e(B).  Fix  t^j  and  let  be  normal.  By  the  above  fact 
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and  the  choice  of  C,  cannot  contain  a  step  I  g  .  Therefore,  by  the  Quasi- 
Transitivity  Lemma  (Section  4.1.1),  C\  e  e(C2),  contradicting  the  vicious  circle 
condition. 

(in')  The  case  B  X  A  is  case  (ii),  thus  suppose  B  A.  Then  by  part  (i)  of 
the  Proposition  in  Section  (4.1.1),  there  exists  a  multiplicative  conjunction  C,  say 
c  =  Cl  <g>  C2,  with  C  €  e(A)  and  B  -<  C,  say  B  ■<  C2  and  there  is  a  normal  tree 
r^,  which  does  not  contain  any  step  J.  g^  ■ 

Now  suppose  A  €  e(F).  By  part  {ii),  e(f?)  C  e(C2)  thus  A  €  e(C2).  It  follows 
from  the  Quasi-Transitivity  Lemma  that  C  €  e(C2),  thus  Ci  6  e(C2),  contradicting 
the  vicious  circle  condition.  ■ 

Define  a  relation  <1  between  the  conclusions  of  the  n-links  of  S  by  letting 

A'  n  B'  <  A  n  B  =df  A!  n  B1  e  e{A)  or  A'  n  B'  €  e(B). 

Box  Lemma  Let  S  be  a  structure  for  MALL  with  flagging  function  satisfying 
the  vicious  circle  and  the  box  conditions  and  let  *■*--£*  be  a  link  in  S. 

(i)  IfX  €  e(Ai)  then  e(X)  C  e(A,). 

(ii)  e(Ai)  n  e{A2)  =  0. 

(iii)  <  is  a  strict  partial  ordering. 

Proof,  (i)  Let  A  be  A\  or  A2,  say  A\  and  let  A  .a  be  the  set  of  formula-occurrences 
flagged  with  A.  By  the  box  conditions,  these  are  all  the  doors  of  e(A)  that  axe  not 
a  ghost  door.  Let  Y  €  e(X)  and  consider  a  normal  computation  of  Y  6  e(X).  If 
Y  £  e(A),  then  any  empire-sequence  in  must  exit  e(A)  through  some  door  D 
by  a  step  j  —  .  Also  t^x j  must  contain  a  subtree  and  since  E  £  e(A)  any 

empire- sequence  in  must  exit  e(A)  through  some  door  D’  by  a  step  j  — p — . 
Moreover  F1  cannot  be  the  same  formula-occurrence  as  F,  because  'r^  is  normal; 
thus  D  is  distinct  from  D1  too.  By  repeating  this  argument  we  obtain  an  infinite 
sequence  D,  D1 , . . .  of  distinct  doors  of  e(A),  a  contradiction  since  A  a  is  finite. 

(ii))  Let  X  €  e(Ai)De(A2).  Let  D  be  the  smallest  formula-occurrence  with  X  -<  D 
such  that  D  is  a  door  either  of  e(A\ )  or  of  e(A2),  say  of  e(Ai ).  By  the  box  condition, 
D  belongs  to  a  n-  or  Contraction  link 

D  E 

F  ’ 


72 


Section  4 


where  and  E  is  a  door  of  e(A2  )■  But  D  €  e(A2),  thus  E  cannot  be  a  door  of  e(A2), 
a  contradiction.  Therefore  e(Ai )  (1  e(A2)  =  0. 

(iii)  If  A0  n  JB0  <  . . .  j4n  n  Bn  <  i40  n  B0,  then  e(C0)  $  e(Ci)  C  ...e(C„)  C  e(A0)  or 
e(C0)  $  e(Ci)  C  . . .  e(Cn)  £  e(S0)  where  C,  is  either  A,  or  B,,  by  parts  (i)  and 
(it)  and  by  the  above  Proposition,  part  (ii).  ■ 

4.3.  Tiling  Lemma  and  Substructure  Theorem  for  MLL. 

The  main  technical  results  relevant  to  proof-net  for  MLL  are  presented.  Given 
the  •‘‘our  alternatives 


A05  AC.B  BCA  AOB, 

the  Tiling  Lemma  shows  that  in  a  proof  net 

A§  B  if  and  only  if  e(A)  fl  e(B)  =  0. 

The  Tiling  Lemma  is  fundamental  for  the  Sequentialization  Theorem.  An  interest¬ 
ing  result  follows:  ( Substructure  Theorem )  Let  S  be  a  proof-net  for  MLL  and  let 
A  occur  in  S.  Then  e(A)  is  a  substructure  of  S  that  is  also  a  sub-net.  Given  the 
Substructure  Theorem,  the  informal  meaning  of  Tiling  Lemma  may  be  stated  as 
follows:  if  some  X  is  deductively  relevant  to  both  A  and  B,  then  we  can  find  a 
deduction  of  B  in  which  either  A  or  -'A  occurs  as  an  assumption  (and  viceversa, 
with  A  and  B  exchanged). 

Proposition.  Let  S  be  a  proof-net  for  MLL.  The  following  are  equivalent: 

(i)  BnA 

(ii)  for  some  door  D  of  e(B)  and  some  normal  computation  of  D  €  e(A),  the  last 
step  in  has  the  form  (f) 

(iii)  for  some  normal  computation  of  B  €  e(A)  the  last  step  in  r^j  has  the  form 

CD- 

Proof.  ( i )  =>  (ii):  let  be  a  normal  computation  of  B  £  e(A).  Since  A  $  e(B), 
each  empire-sequence  in  reaches  for  the  first  time  some  D  €  e(B).  Fix  any 
empire-sequence  and  consider  the  normal  subtree  T^y 
(iii)  =>  (i)  is  part  (iii)  of  the  Proposition  in  Section  (4.2). 
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( ii )  =>  ( iii ).  If  D  is  the  main  door  of  e(B),  then  we  are  finished.  Otherwise,  the  last 
step  in  crosses  a  U-link  f  say  .E1  is  C  UD.  By  part  (iii)  of  the  Proposition  in 
Section  (4.2),  e(D)  C  e(.4).  By  the  Connectedness  condition  we  have  e(C)  =  e{D). 

Consider  any  normal  computation  of  D  €  e(C)  and  let  be  the  corresponding 
tree  of  admissible  empire-sequences.  Since  e(C)  fl  e(B)  ^  0  and  C  e(B),  any 
empire-sequence  in  must  enter  e(B)  through  some  door  D' ,  either  the  main 
door  —  and  in  this  case  we  are  done  —  or  a  side  door  D'  crossing  a  U-link  f  -—7, 
say  with  E'  =  C1  U  jD'.  Again  we  have  e(D')  C  e(C)  (Proposition  (iii),  4.2)  and 
e(C')  =  e(D')  (by  connectedness).  Let  Co,  Cj,  C2  be  A ,  C  C  and  let  Do,  Dj,  D2 
be  B,  D,  D' ,  respectively. 

Proceeding  in  this  way,  we  obtain  a  sequence  D0,  D 2,...  of  doors  of  e(B)  and 
a  sequence  Co,  Ci,...  such  that 


Ce(C,)Ce(C0)Ce(vl)c5. 

This  implies  that  Co,  C 1,...  are  distinct  formula-occurrences  in  5,  thus  Cj  UD], 
C2  U  D2,...  are  also  distinct.  But  S  is  finite,  thus  we  cannot  have  an  infinite 
descending  sequence  of  proper  inclusions.  Therefore  there  is  an  n  such  that  Dn  is 
the  main  door  of  e(B),  hence  B  €  e(A).  ■ 

Tiling  Lemma,  (cfr.  Girard  [1987c]  II. 1,  Proposition  3)  Let  S  be  a  proof-net 
for  MLL.  Let  A,B  €  <5  such  that  e(A)  fl  e(B)  ±  0.  If  A  $  e(B),  then  BtlA. 

Proof.  We  show  that  under  the  given  conditions,  A  £  e(B)  implies  B  €  e(A).  Fix 
X  €  e.(A)  D  e(B),  consider  tiny  normal  computation  of  X  €  c(A)  and  let  be  the 
corresponding  tree  of  admissible  empire-sequences.  Since  A  (£  e(B),  any  empire- 
sequence  in  T^j  must  enter  e(B)  through  some  door  D  by  a  step  of  the  form  (f). 
The  result  follows  by  taking  the  subtree  and  applying  the  previous  proposition 
(in  the  direction  (ii)  =>  (i).  ■ 

Door  Lemma.  Let  S  be  a  proof-net  for  MLL  and  let  D  be  any  door  of  e(.4),  for 
some  A  £  S.  Then  A()D,  and  e(.4)  C  e(D).  In  particular,  if  D  and  D'  are  any 
two  doors  of  e( A),  D(fD'. 

Proof.  Suppose  A  <fc  e(D).  Since  D  is  a  door  of  e(A),  we  have  DnA.  By  the 
previous  Proposition,  for  some  normal  computation  of  D  €  e(A)  the  last  step  in 
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Tj^j  has  the  form  (f).  But  this  is  impossible,  since  D  is  a  door  of  e(A).  Therefore 
DOA. 

Suppose  X  £  e(A)  and  let  be  a  normal  tree.  No  step  1J. D  ^  g  can  occur 
in  an  empire-sequence  of  r^,  since  D  is  a  door  of  A.  Taking  any  tree  and 
applying  the  Quasi-Transitivity  Lemma,  we  obtain  X  £  e(D),  hence  e(A)  C  e(D). 

Thus  if  D  and  D'  are  two  doors  of  e(A),  we  obtain  D()D'  by  applying  twice 
the  previous  paragraph.  ■ 

Shared  Empires  Lemma,  (cfr.  Girard  [1987c]  II.2,  Definition  3)  Let  S  be  a 
proof-net  for  MLL  and  suppose  A(}B. 

(i)  If  for  some  X ,  X  £  e(i?)  and  X  $  e(A),  then  any  normal  computation  of 
X  £  e(-B)  contains  a  step  of  the  form  J,  for  some  E  and  all  formulas  labeling  the 
subtree  of  belong  to  e(A)C\e(B)  (i.e.,  any  normal  computation  of  X  £  e(J3) 
must  exit  e(A)  first  through  the  main  door.) 

(ii)  e(A)r\e(B)  is  the  set  of  all  formulas  X  such  that  for  some  normal  computation 
of  X  £  e(B),  the  nodes  of  are  labeled  with  formulas  of  e(A)  Pi  e(B )  only. 

Proof.  ( i )  Fix  X  £  e(B),  with  X  ^  e(A)  and  consider  a  normal  computation  of 
X  £  e(B).  Any  empire-sequence  in  r jgj  murt  exit  e(A)  through  a  door  D  by  a  step 
J.  for  some  E.  We  claim  that  some  door  D  is  the  main  door  A. 

Otherwise,  in  any  occurrence  of  such  a  step  F  must  be  have  the  form  C  U  D  or 
DUC  and  another  empire-sequence  in  contains  the  step  J.  But  C  £  e(A), 
thus  any  empire-sequence  in  the  subtree  r ^  must  exit  e(A)  through  a  door  D'  by 
a  step  J.  ^r,  for  some  E' . 

By  repeating  this  argument,  we  find  an  infinite  sequence  E,E',E",...  which 
must  be  all  distinct,  since  t^j  is  normal.  But  is  finite,  a  contradiction. 

Finally,  consider  a  subtree  of  rfy.  If  some  node  in  i.,  labeled  by  a 
Y  £  e(A),  then  by  the  previous  argument  some  empire-sequence  in  must  exit 
e(A)  through  the  main  door.  But  is  normal,  since  is  normal,  a  contradiction. 

(it)  For  X  £  e(A)  Pi  e(J3),  consider  a  normal  computation  of  A*  £  e{B)  represented 
by  the  normal  tree  If  e(B)  C  e(A),  then  all  the  labels  of  are  formula- 

occurrences  in  e(A),  as  required.  Otherwise,  suppose  some  node  in  is  labeled 
with  Y  $  e(A).  By  part  (i)  an  empire-sequence  in  contains  a  step  of  the  form 
l  for  some  E.  Since  X  £  e(A),  the  same  empire  sequence  must  eventually  reenter 
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e(A)  through  a  step  of  the  form  f  jt.  Since  t*b j  is  normal,  so  is  the  subtree  t^j. 
By  the  above  Proposition,  ACB,  contradicting  the  assumption  AQB.  ■ 

Substructure  Theorem.  Let  S  be  a  proof-net  for  MLL.  For  all  A  £  S ,  define 

_ A 

Sa( A)  —df  e(A)  where  A  contains  exactly  the  doors  of  e(A)  and  let  S  be  the  com¬ 
plementary  substructure  of  Sa  (see  section  (3.3):  this  is  a  structure  with  nonlogical 
axiom  A).  Then 

(i)  for  all  X,Y  £  Sa,  Y  €  e(A)  in  Sa  if  and  only  if  Y  £  e(A')  in  S. 

(ii)  for  all  X,  Y  £  S  ,  Y  £  e(A)  in  S  if  and  only  if  Y'  6  e(A')  m  S. 

(iii) 5^  and  SA  satisfy  the  vicious  circle  and  connectedness  conditions,  i.e.,  they  are 
sub  nets. 

Proof.  ( i )  Clearly,  if  Y  £  e(X)  in  5,4,  then  Y  £  e(A')  in  5.  Conversely,  if  1'  €  e(A') 
in  5,  then  by  the  Shared  Empires  Lemma  some  computation  of  1'  £  e(A”)  remains 
always  inside  e(A)  =  Sa- 

[ii)  Assume  Y'  €  e(X)  in  5  and  consider  a  normal  tree  of  admissible  empire- 
sequences,  labeled  with  formula-occurrences  in  5  .  By  induction  on  r*x j  we  con¬ 
struct  a  tree  which  is  labeled  with  formula-occurrences  in  5  and  has  the  fol¬ 
lowing  property:  for  every  step  in  from  U  to  V  different  from 

_  _ A 

where  U  and  V  are  in  A,  the  nonlogical  axiom  of  5  ,  there  is  a  step  of  the  same 
kind  in  r^x j  from  U  to  V.  The  construction  is  as  follows.  Every  step  in  of  the 
form  —u  —  v—  where  U,V  €  A,  follows  a  step  of  the  form  ( uparrow ),  since  r^-j  is 
normal.  By  inductive  hypothesis  we  have  a  t^x  j  ending  with  a  step  (f).  By  the  Door 
Lemma,  V  £  e(U )  in  5.  By  the  Shared  Empires  Lemma  we  can  construct  a  normal 
tree  labeled  only  with  formula-occurrences  in  e(A).  Therefore  in  r^q  there  is  no 
step  of  the  form  (|)  or  (1J.)  through  y  for  some  Z.  Therefore  the  result  of  replacing 
each  bottom  node  (leaf)  of  r^q  with  a  copy  of  represents  a  computation  of 
V  £  e(X).  The  other  steps  of  the  construction  are  obvious. 

Conversely,  consider  X,Y  £  S  and  assume  Y  £  e(A')  in  5.  Given  a  normal 
tree  of  admissible  empire-sequences,  labeled  with  formula-occurrences  in  5,  by 
induction  on  t^j  we  construct  a  normal  tree  labeled  with  formula-occurrences 
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in  S  .  Let  U  €  A.  Since  X,  Y  €  S  ,  every  empire-sequence  in  containig  a  step 
of  the  form  (T)xr  must  also  contain  a  step  of  the  form  (|)-p,  where  V  €  A.  If 
is  the  tree  given  by  induction  hypothesis,  we  continue  each  empire-sequence  in  t^x j 
with  a  step  of  the  form  The  rest  of  the  construction  is  obvious. 

(tit)  This  follows  from  parts  (i)  and  (it).  ■ 

4.4.  Sequentialization  Theorem  for  Propositional  MLL. 

We  give  a  proof  of  the  Sequentialization  Theorem  for  Propositional  MLL: 

Sequentialization  Theorem.  If  S  is  a  proof-net  with  conclusion  T  for  MLL-  or 
MLL  then  we  can  find  a  derivation  V  of  T  in  the  corresponding  fragment  such 
that  the  associated  proof-net  Sp  is  S. 

4.4.1.  Proof  of  the  Sequentialization  Theorem. 

Proof.  Suppose  S  is  a  proof-structure  with  conclusion  T  in  propositional  MLL 
satisfying  the  vicious  circle  and  connectedness  conditions.  We  proceed  by  induction 
on  the  number  of  formulas  in  <5.  If  T  consists  of  an  axiom  link,  then  a  derivation 
of  T  consists  of  a  sequent  axiom  possibly  followed  by  a  sequence  of  applications  of 
the  J_-rule.  If  T  contains  the  conclusion  of  a  U-link,  then  the  induction  hypothesis 
applies  to  the  proof-structure  S'  obtained  from  S  by  removing  only  that  link  and 
we  conclude  with  an  application  of  the  U-rule. 

The  difficult  step  is  the  case  when  T  contains  no  conclusions  of  a  U-link.  We  use 
the  following  argument  by  Girard  [1987c],  II. 1,  Remark  2.  We  need  to  find  a  <g>-link 
with  conclusion  A  <g>  B  €  T  with  the  property  that  if  S'  results  form  S  by  removing 
only  the  link  in  question,  then  S'  is  partitioned  into  two  substructures  S\  =  e(A) 
and  <52  =  e(B )  both  satisfying  the  vicious  circle  and  connectedness  conditions.  If 
for  some  A  ®  B  ail  the  doors  of  e(A)  and  e(B)  are  fake  doors,  i.e.,  elements  of  I\ 
then  all  the  conclusions  of  S  different  from  A(g>B  are  partitioned  by  e(A)  and  e(  J5). 
Otherwise,  let  A  be  T  \  (e(.4)  U  e(B)).  If  any  axiom  connects  X  €  A  with  }'  6  e(A) 
[or  Y  e  e(i?)],  then  A'’  contains  a  door  of  e(A),  [of  e(P)],  which  is  impossible.  If  no 
axiom  connects  A  with  either  e(A)  or  e(B),  then  Afle(A®B)  =  0.  This  contradicts 
the  connectedness  condition.  Therefore  it  is  enough  to  find  A®B  such  that  neither 
e(A)  nor  e(B)  has  any  side  door. 
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Let  Aq  ®  Bo  €  T  and  suppose  e(Bo)  has  a  side  door  D.  Then  D  -<  A’  6  T,  and 
by  the  hypothesis  of  the  case,  X  =  A\  <g)  B\,  say  D  X  A\.  Since  D  £  e(Bo)  n  e{A\ ) 
and  A\  $  e(B0),  we  have  B0  <E  e(Ax)  and  e(B0)  C  e(Ai).  Moreover,  A0  €  e(Ai), 
since  A0  ®  B0  €  e(Aj)  and  if  Ai  €  e(A0),  then  D  e  e(A0)ne(B0)  and  by  the  Tiling 
Lemma  the  vicious  circle  condition  is  contradicted.  Thus  e(Ao)  C  e(Ai).  Since 
e(Ai )  n  e(Bx )  =  0,  we  obtain 

e(A0)  U  e(Bo)  $  e(Ai)  $  e(Ai)Ue(B3). 

If  e(B i)  has  a  side  door  D\ ,  then  we  can  find  a  formula-occurrence  .42  ®  B2  such 
that  D\  -<  A2,  and  arguing  as  before  we  obtain 

e(Ai )  U  e(B3)  C  e(A2)  £  e(A2)Ue(B2), 

and  so  on.  Plainly,  A0  <g)B0,  A\  ®B\,...  are  different  elements  of  T,  thus  the  search 
ends  with  a  An®Pn  with  the  property  that  e(An)Ue(Bn)  is  maximal  with  respect 
to  inclusion.  Thus  neither  e(A„)  nor  e(B„)  can  contain  any  side  door.  ■ 

4.5.  Sequentialization  Theorem  for  Propositional  MALL. 

The  results  of  sections  (4.3)  and  (4.4)  are  easily  generalized  to  proof-nets  for 
MALL  once  the  following  fact  is  available. 

Box-Door  Lemma.  Let  S v  be  a  proof-net  for  MALL  and  let  D  be  any  door  of 
e(A,),  where 

A3  A2 

A\  n  a2 

is  a  link  m  Sv.  Then  A%()D. 

A  proof  of  the  Box-Door  Lemma  is  given  at  the  end  of  the  section. 

Fact.  Let  S v  be  a  proof-net  for  MALL.  If 

A~i  X2 

A',  n  x2 

occurs  in  S v  and  for  some  B  and  D,  D  is  a  door  simultaneously  of  e{B)  and  of 
e(Xt),  then  B  €  e(D). 
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Proof.  By  the  box  condition,  D  is  either  X,  or  F}  in  a  Contraction  link 

F  F2 
F 

where  F;  is  flagged  with  A*,  i,j  <  2;  say  D  is  F\  and  F,  is  flagged  with  A,. 

Suppose  Z  €  e(A\)  and  let  ,  be  a  normal  tree.  No  step  can  occur 

in  an  empire-sequence  of  since  F,  is  a  door  of  A',.  By  the  Box-Door  Lemma, 
A, OF;  taking  any  tree  and  applying  the  Quasi-Transitivity  Lemma,  we  obtain 
Z  €  e(Ft).  Hence  e(A'I)  C  e(F,)  and  by  part  (?)  of  the  Box  Lemma  (section  4.2) 
<X  i)  =  e(Fj). 

Suppose  B  e(D),  and  consider  a  normal  r^.  Any  empire-sequence  in 
reaches  a  door  Gx  of  e(D)  for  the  first  time  by  a  step(f)  through  a  link 

Gi  (?2 

G  ' 

w'here  Gt  is  flagged  with  A j,  say  i  =  j.  By  the  Box-Door  Lemma,  G,OF-  By  part 
(m)  of  the  Proposition  in  section  (4.2),  F\  6  e(J5)  and  F2  €  e(B),  therefore  F] 
cannot  be  a  door  of  e(B),  a  contradiction,  since  Fj  is  D.  ■ 

Proposition.  Let  <SV  be  a  ■proof-net  for  MALL.  The  following  are  equivalent: 

(i)  BC. A] 

(ii)  for  some  door  D  of  e(B)  and  some  normal  computation  of  D  6  e(A),  the  last 
step  in  T{%  has  the  form  (|); 

(iii)  either  some  link 

Ax  A2 

Aj  n  a2 

occurs  in  e(A)  and  B  and  A,  have  a  common  door )  or  for  some  normal  computation 
of  B  6  e(A)  the  last  step  in  t^j  has  the  form  (f). 

Proof.  As  in  the  proof  of  the  analogue  Proposition  in  section  (4.3),  (?)  =>  (??)  is 
straightforward.  To  prove  (???)  =>  (?),  let  D1  bt  a  common  door  of  e(B)  and  e( A', ), 
where 

D’  D" 


D 

is  a  link  in  c(A).  By  the  above  fact,  B  €  e(D'),  thus  e(B)  C  e(A',)  by  two  appli¬ 
cations  of  part  (ii)  of  the  Box  Lemma,  section  (4.2).  By  parts  (?)  and  (??)  of  the 
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same  lemma,  A  £  e(AT)  and  A  $  e(A'2),  since  AT,  AT  6  e(A).  Therefore  A  £  e(B). 
Furthermore,  for  the  same  reason  no  empire-sequence  in  a  tree  can  cross  a  link 
A  for  any  W,Z.  Combining  Tj®. . j  with  a  tree  r^j,  we  obtain  B  €  e(A)  by  the 
Quasi-Transitivity  Lemma.  Hence  BHA.  The  other  case  of  (iii)  =>  (i)  is  as  before. 

( H )  =>•  (in).  Let  D  be  a  door  of  e(B)  and  let  be  a  normal  tree  ending  with  a 
step  (t)  through  a  link 

C  D 

E  ' 

If  D  is  B  then  we  are  done.  If  D  is  a  common  door  of  e(B)  and  of  A',,  say  of  AT, 
for  some  link 

AT  AT 
AT  n  AT  ’ 

then  by  the  Box-Door  Lemma,  D()X\  and  C< C>AT.  By  part  (iii)  of  the  Proposition 
in  Section  (4.2),  e(C)  C  e(A)  and  e(D)  C  e(A),  therefore  AT ,  AT  €  e(A)  and  so 
AT  n  AT  €  e(A),  as  required. 

If  the  link  — -g—  is  a  U-hnk,  then  we  consider  a  normal  tree  and  we  proceed 
as  in  the  proof  of  direction  (ii)  =>  (Hi)  of  the  Proposition  in  section  (4.3).  We 
construct  a  sequence  Do,  D i,...  of  doors  of  t(B)  and  a  sequence  Co,  such 

that 

...  C  e(C\)  C  e(C0)  C  e(A)cS. 

In  a  finite  number  of  steps  we  reach  either  the  main  door  B  or  a  common  door  of 
e(B)  and  of  e(AT),  for  some  premise  AT  of  a  n-link.  ■ 

Tiling  Lemma.  Let  be  a  proof-net  for  MALL.  Let  A,B  6  S  such  that 
e(A)  n  e(B)  If  A  $  e(B),  then  BCA. 

Proof.  As  in  the  case  of  MLL,  the  proof  follows  by  an  application  of  the  above 
proposition  in  the  direction  (ii)  =>  (i).  ■ 

Door  Lemma.  Let  S ^  be  a  proof-net  for  MALL  and  let  D  be  any  door  of  e(A). 
for  some  A  €  <S^.  Then  A()D,  and  e(A)  C  a(D). 

Proof.  If  A  £  e(D),  then  by  the  above  Fact  D  cannot  be  simultaneously  a  door  of 
A  and  of  A',,  for  some  link 

AT  X2 
A  i  n  AT 
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Also,  no  can  end  with  a  step  (]" ),  since  D  is  a  door  of  A.  As  before,  we  reach  a 
contradiction  by  applying  the  above  Proposition  in  the  direction  (i)  =s>  (m).  ■ 

The  Shared  Empires  Lemma  carries  through  in  MALL,  in  fact  it  is  trivial 
if  applied  to  premises  of  (1-  or  Contraction  links,  since  in  this  case  A()B  implies 
e(A)  =  e(B),  by  the  Box  Lemma  (section  4.2).  The  Substructure  Theorem  also 
follows  in  MALL  from  the  Box-Door  Lemma. 

It  would  be  reasonable  to  regard  the  Box-Door  Lemma  as  a  basic  connectedness 
condition  in  the  definition  of  proof-nets  for  MALL.  However,  it  can  be  derived  by 
a  straightforward  induction  on  <. 

Proof  of  the  Box-Door  Lemma'.  Let  S v  be  a  proof-net  for  MALL,  let 

Ai  Ai 

A\  n  A'i 

be  a  link  in  S ^  and  D  is  any  door  of  e(At).  If  no  n-link  occurs  in  e(A,),  then  D(>A 
by  the  Door  Lemma  for  MLL  (easily  extended  to  the  fragment  with  ®).  Otherwise, 
it  follows  from  the  Door  Lemma  for  MALL  with  the  Box-Door  Lemma  inductively 
applied  to  the  n-links  inside  e(A,).  ■ 

Sequentialization  Theorem.  If  S ^  is  a  proof-net  with  conclusion  T  for  MALL 
then  we  can  find  a  derivation  T>  of  \~  T  in  MALL  such  that  the  associated  proof-net 
S-p  is  S. 

Proof.  The  argument  is  similar  to  the  case  for  MLL.  In  the  difficult  step,  when  T 
contains  no  conclusions  of  a  U-link,  if  every  formula-occurrence  in  T  is  the  conclusion 
of  a  ri-  or  Contraction  link,  then  all  the  premises  of  such  links  must  be  flagged  with 
the  premises  of  a  unique  link 

A2 

Ai  n  A2, 

by  connectedness,  and  we  proceed  in  the  obvious  way.  Otherwise,  we  reduce  to  the 
argument  in  the  proof  for  MLL  (with  nonlogical  axioms)  by  repeated  applications 
of  the  Substructure  Theorem.  The  details  are  omitted.  ■ 
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4.6.  Sequentialization  Theorem  for  First  Order  MALL. 

The  following  proposition  guarantees  that  the  relation  <(  is  well-behaved  with 
respect  to  substructures.  This  is  the  only  technical  fact  needed  to  extend  tha 
Sequentialization  Theorem  for  MALL  to  the  first  order  case. 


Proposition.  Let  S  be  a  proof-net  Jot  first  order  MALL.  Let  a,  b  be  eigenvariables, 
where  a  is  associated  with  f\x.A(x).  If  b  =  a  or  b  <t  a,  then  b  occurs  only  inside 
e{A{a)). 


Proof.  Let  a  =  ao  >°  ...  >°  an  =  b,  where  a,  is  the  eigenvariable  associated  with 
f\xt.Ai.  The  proof  is  by  induction  on  n.  If  b  =  a,  then  a  occurs  only  in  e(A),  since 
<t  is  strict. 

If  a  >t  b,  then  since  a*  occurs  inside  e(A,+i)  and  a,  occurs  only  inside  e(A,), 
for  some  formula  X(a,),  we  have  )  £  e(A,)  D  e(A1+i)  and  since  by  induction 
hypothesis  a,  occurs  only  inside  e(Ao),  X(a; )  £  e(Ao)  D  e(A,+i).  Since  a,  occurs 
outside  e(A,+1),  we  cannot  have  e(Ao)  C  e(At+i),  in  particular  AoCj4,+i  and 
A0  =  Al+ 1  are  impossible.  By  the  Tiling  Lemma  A;+iCA0  or  At+]OA0.  In  both 
cases,  al+j  occurs  inside  e(Ao);  if  a«+i  occurs  also  outside  e(Ao),  a,+]  >°  ao, 
contradicting  he  fact  that  <t  is  strict. 


Proof  of  the  Sequentialization  Theorem.  Let  <S(r)  be  a  proof-structure  for  first 
order  MALL  with  flagging  function  <£>,  satisfying  the  vicious  circle,  connectedness, 
box  and  parameters  conditions.  By  induction  on  >t  we  reduce  to  the  proof  for 
propositional  MALL.  Let  f\  x.A  have  eigenvariable  a,  where  a  is  maximal  with 
respect  to  <t.  Let  SAz.a  —if  e(Az--^)  let  S Ar  A  be  the  substructure  of  S 
complementary  to  S^z.a  (containing  the  nonlogical  axiom  A,  A1- A).  Since  no 
ghost  formula  is  a  premise  of  any  link,  we  may  assume  that  A  does  not  contain  any 
ghost  formula.  Also  let  5/t(A,  A(a))  be  the  substructure  of  Sax. a  coinciding  with 
e(A(a)). 

Let  <“  be  the  relation  <f  defined  on  Sa ■  If  6  <“  c  <°  6  in  Sa,  then  by  the 
above  Proposition,  b  <t  c  <°  b  in  S.  Thus  <“  is  a  strict  ordering.  Notice  that  no 
eigenvariable  c  can  occur  in  any  fake  door  of  e(A(a)),  since  no  eigenvariable  occurs 
in  the  conclusions  of  <S,  nor  in  any  side  door  of  e(A(a)),  since  by  the  choice  of  a  we 
canndt  have  c  >°  a. 
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j  ^ 

By  the  Substructure  Theorem,  if  X  and  Y  occur  in  S  ,  then  X  €  e(T)  in 
SAz  A  if  and  only  if  X  €  e(F)  in  S.  It  follows  that  if  b  <t  c  <°  b  in  S  1  A  then 
i>  <(  c  <°  b  in  S.  We  conclude  that  <S  satisfies  the  parameters  condition. 

By  the  Substructure  Theorem  (Corollary,  section  4.5)  and  the  above  facts, 
SAx.a  and  •  are  subnets.  Therefore  we  can  apply  the  induction  hypothesis  to 

^  x  >4 

<S/t(A,A(a))  and  to  5  and  obtain  a  derivation  Vo  with  conclusion  b  A,. 4(a) 
and  a  derivation  of  b  T  with  non-logical  sequent-axiom  b  A,/\x.A. 

As  pointed  out  before,  a  does  not  occur  in  A,  therefore 

b  A  ,A{a) 
b  A,/\x.A 

is  a  correct  inference.  Therefore  the  concatenation  of  V0  and  V\  is  a  correct  deriva¬ 
tion  of  T.  ■ 

4.7.  A  System  of  Annotations  on  Proof-Structures. 

We  consider  in  detail  a  notational  variant  of  Proof-Structures  inspired  by  the 
sequent  formulation  of  Natural  Deduction  and  described  in  section  (1.1.5). 

Suppose  we  annotate  each  formula  A  in  a  proof-structure  S  with 

(r)[Aj  -  .4, 

where  T  is  the  list  of  open  doors  and  A  is  the  list  of  closed  doors  of  the  empire 
of  A  ( fake  and  side  doors  in  Girard’s  terminology).  In  the  case  of  a  first  order 
proof- structure  if  a  formula  /\  x.A  is  associated  with  the  eigenvariable  a,  then  we 
add  a  <°  {5i  . . .  bn }  to  the  annotations  of  f\x.A,  where  a  <°  bx  for  all  i  <  n.  In 
a  LISP  environment,  such  annotations  may  be  simply  pointers  to  other  parts  of 
the  structure.  Notice  that  in  a  given  proof-structure  the  empire  of  a  formula  is 
completely  determined  by  its  doors. 

First  we  consider  the  properties  of  the  annotations  when  <5  is  a  proof-net. 

(1)  Let  S  be  a  proof- net  ending  with  a  link 

B  C 


B  ®  C 
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and  let  S\  be  the  result  of  removing  the  link  in  question.  Suppose  A  occurs  in  «Si 
with  the  annotation  (T)[A]  —  A. 

(i)  If  r  is  T',  B ,  the  annotation  of  C  in  S\  is  (II),  [A]  —  C  and  B  ®  C  is  the  ghost 
conclusion  of  cut  (thus  C  =  B-1),  then  the  annotation  of  A  in  S  is  (T',  II)[A,  A]  —  A\ 

(ii)  If  T  is  T',  B,  the  annotation  of  C  in  S\  is  (II),  [A]  —  C  and  B  ®  C  is  not  a  cut, 
then  the  annotation  of  A  in  S  is  (T',  B  ®  C,  II)[A,  A]  —  A. 

Similar  clauses  hold  if  T  =  V ,C. 

(iii)  If  B,  C  do  not  occur  in  T,  then  the  annotation  of  A  in  S  is  still  ( T) [A]  —  A. 

This  is  precisely  what  we  expect  if  we  regard  the  annotations  ( 1 )  Let  5  be  a  proof- 
net  ending  with  a  link 

B _ C 

B  ®  C 

and  let  5i  be  the  result  of  removing  the  link  in  question.  Suppose  A  occurs  in  <Si 
with  the  annotation  (T)[A]  —  A. 

( 1 )  If  T  is  T',B,  the  annotation  of  C  in  «Si  is  (II),  [A]  —  C  and  B  <g>  C  is  a  cut  (thus 
C  —  Bx),  then  the  annotation  of  A  in  S  is  (r',II)[A,  A]  —  A\ 

( ii )  If  r  is  T',  B ,  the  annotation  of  C  in  S\  is  (II),  [A]  —  C  and  B  ®C  is  not  a  cut, 
then  the  annotation  of  A  in  S  is  (I1',  B  ®  C,II)[A,  A]  -  A. 

Similar  clauses  hold  if  T  =  T',  C. 

(Hi)  If  B,  C  do  not  occur  in  T,  then  the  annotation  of  A  in  S  is  still  (T)[Aj  —  A. 

This  is  precisely  what  we  expect  if  we  regard  the  annotations  as  the  analogue  of 
a  list  of  the  open  and  closed  assumptions  in  ordinary  Natural  Deduction  and  if 
we  think  of  the  introduction  of  a  (g>-link  as  the  analogue  of  the  substitution  of  a 
derivation  for  an  open  assumption  of  another  derivation. 

(2)  Let  5  be  a  proof-net  ending  with  a  link 

B  C 
BuC 

and  let  5i  be  the  result  of  removing  the  link  in  question.  Suppose  A  occurs  in  S\ 
with  annotation  (T)[ A]  —  A. 

( i )  If  T  =  T',  B,  C,  then  the  annotation  of  A  in  S  is  (T',  B  LI  C)[A]  —  A; 
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(iz)  If  r  =  r,B,  where  C  does  not  occur  in  T',  then  the  annotation  of  A  in  S  is 

(r')[A,B]-A; 

(tit)  If  B  and  C  do  not  occur  in  T,  then  the  annotation  of  A  in  S  is  still  (T)[A]  —  A. 

The  second  case  corresponds  precisely  to  the  removal  of  open  assumptions  in  the 
implication  introduction  rule. 

Finally,  let  A  have  the  form  /\  x.A'  and  let  a  <°  {b\, . . . ,  6*}  be  also  in  the  anno¬ 
tation  of  A  in  <Si.  In  addition,  suppose  we  are  in  case  (it)  above,  so  that  a  door 
of  e(A),  say  B,  becomes  closed  in  <S,  and  that  b  is  an  eigenvariable  occurring  in  B 
with  b  ^  b{  for  all  i  <  k.  Then  a  <°  {bi, . . . ,  bn, b)  is  in  the  annotation  of  A  in  S. 

(3)  Let  S  be  a  proof-net  ending  with  links 

c;  c,"  b  c 

~Ci  BnC 

where  the  annotations  of  B  and  C  are  [C{, ...,  C'n]  —  B  and  [C", ...,  C"]  —  C.  Let  <Sj 
be  the  result  of  removing  all  the  links  in  question.  If  A  occurs  inside  Si  with  the 
annotation  (C[x , ...,  C-p  )[A]  -  A  or  (C-' ,  •••,  C"  )[A]  -  A,  then  the  annotation  of  A  in 
S  is  [C'j, ...,  C'ip ,  A]  —  A  or  [C'' , ...,  C"p ,  A]  —  A.  Here  0  <  p  <  n  and  these  axe  the 
only  possible  cases,  since  S  satisfies  the  box  condition. 

Let  A  occur  in  S\  and  have  the  form  f\x.A'  and  let 


a  M(C,' . ,C'J(A]-A 


be  the  annotation  of  A  in  S\.  In  addition,  suppose  that  ci,...,c9  are  all  the  eigen- 
variables  occurring  in  either  C'ix,...,C[p  or  in  B  with  c/  ^  bj  for  all  j  <  kj  <  p. 
Then  let 

a  <°  {6i,...,6jt,c1,...,c?}[C'i,...,C^,A]  -  A 


be  the  annotation  of  A  in  S. 

(4)  Let  5  be  a  proof-net  ending  with  the  link 
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and  let  S\  be  the  result  of  removing  the  link  in  question  from  S.  Let  f\y.B  occur 
in  <Si  with  the  associate  eigenvariable  b  and  with  the  annotation 

b<°  {d,, . . .  ,dm}(r)[A]  —  f\  y.B. 

If  a  occurs  in  A  or  in  /\  y.B  then  we  add  a  to  the  list  {di, . . .  ,dm)  in  the  annotation 
of  f\  y.B  in  S. 

Conversely,  the  annotations  can  be  used  to  verify  whether  a  proof-structure  is 
a  p’-oof-net.  For  instance,  in  the  case  of  a  link  BB^ ,  to  verify  the  vicious  circle 
condition  we  consider  the  annotations  of  B  and  C,  say  (IT)[A]  —  B  and  (E)[0]  —  C, 
and  check  that  no  formula-occurrence  in  II  U  A  is  a  subformula  of  E  U  0. 

In  the  case  of  a  link  ,  to  verify  the  connectedness  condition  we  consider 
the  annotations  of  B  and  C,  say  (II)[A]  —  B  and  (H)[0]  —  C,  and  check  that  II 
contains  the  same  occurrences  as  E  and  A  the  same  occurrences  as  0. 

In  the  case  of  a  link  >  to  verify  the  box  condition  we  consider  the  anno¬ 

tations  of  B  and  C,  say  (Ci,...,Cn)  —  B  and  ( C[ , ...,  C'n )  —  C  and  verify  that  for  all 
i  <  n  there  is  a  contraction  link  -'cuCi  ■ 

Finally,  we  use  all  the  annotations  of  the  form  a  <°  {fcj, . . . ,  6*}  to  check  that 
we  do  not  obtain  c  <*  c  for  some  c,  etc. 
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5.  The  Method  of  Chains. 

The  notions  of  path  and  of  chain  (section  5.1)  are  the  main  data-structure  in 
Ketonen  and  Weyhrauch  [1984]  and  allow  an  alternative  treatment  of  proof-nets 
for  MLL.  Sections  (5.2,  5.3)  solve  the  problem  of  comparing  the  method  of  chains 
and  the  method  of  empires  for  MLL. 

5.1.  Chains. 

In  a  proof-structure  S  with  conclusion  T  a  path  is  simply  a  set  of  axiom  links 
satisfying  certain  conditions  and  a  chain  is  a  global  connection,  determined  by  the 
axiom-links  and  the  ®-links. 

Chain 


A  C i  ®  C2  Cn_i  ®  Cn  B  . 

In  a  chain,  the  structure  of  the  subformulas  lying  between  axiom-links  and  ®-links  is 
ignored:  for  this  reason,  chains  have  simple  properties.  For  instance,  if  C  is  a  chain 
from  A  to  B,  then  C  is  also  a  chain  from  B  to  A  ( symmetry );  if  C\  is  a  chain  from 
A  to  B,  C2  is  a  chain  from  C  to  D,  then  A  —  C\  —  B  ®  C  —  C2  —  D  is  a  chain  from 
A  to  D. 

Definitions.  Let  <S(r)  be  a  proof-structure  in  MLL. 

(z)  A  path  V  in  S  is  a  nonempty  set  of  axiom  links  in  S  satisfying  the  relevance 
condition  on  conjunctions  (defined  below). 

If  A  is  a  formula  occurrence  of  S,  we  write  V  >  A  (A  is  relevant  relatively  to  V)  if 
for  some  axiom  X\ , . . . ,  Xn  €  V  and  some  i  <  n,  Xt  X  A. 

The  relevance  condition  on  conjunctions  is  the  property 

for  every  A\  ®  A2,  if  V  *— *  Ai  ®  A2  then  V  >->  A]  and  V  A2. 

(«)  A  path  V  in  S  is  minimal  if  no  proper  nonempty  subset  V  of  V  satisfies  the 
relevance  condition  on  conjunctions. 
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(iii)  For  distinct  A,  B  €  <S,  we  say  that  A  and  B  axe  connected  (write  A  |j  B)  if 
there  is  an  axiom  Wi, . . . ,  Xn  6  V  such  that  X,  -<  A  and  Xj  •<  B  with  i  ^  j. 

(iu)  Let  C  and  D  be  formula-occurrences  in  S  such  that  D  C  and  C  D  and 
suppose  A  ■<  C  and  B  -<  D.  We  write  Ca  —  b  D  if  A  ||  B. 

Combining  (iv)  and  ( v )  we  obtain  the  ternary  relation  1Z(Y,X,Z)  of  Ketonen 
and  Weyhrauch  [1984]  ,  definition  4.3.  R(Y,X,  Z)  holds  if  and  only  if  for  some  A , 
£,  we  have  Y  —  a  Xb  —  Z. 

(v)  We  write  aCb  if  A  ®  B  ■<  C  in  S. 

(vi)  For  n  >  0  a  chain  of  length  n  is  a  set  C  =  Co,  ■ . .  ,Cn  of  formula-occurrences 
in  S  such  that  AiCiBi  -  ...  ~An  CnBn,  for  some  Au...,  An,  B i,...,  Bn. 

(vii)  A  chain  is  pure  if  for  all  i  ^  j  with  1  <  i,j  <  n,  Ci  7?  Cj. 

(viii)  A  cycle  of  length  1  is  a  formula  aCB  such  that  A  |j  B.  A  cycle  of  length  n, 
for  n  >  1,  is  a  chain 

aCob  ->1!  C1B1  “  •  •  •  ~A-i  C„_i Bn  i  —  a  Cob 
where  Co,  ■  • .  ,Cn-i  is  pure. 

For  instance,  the  path  PX,P,  R^R1-  and  5, 5X  determines  a  cycle  in 

Px  ®  Q,  <8>  R,  R x  <8 >  5, 5X  ®  P, 

and  the  path  Px,  P,  Q,  Qx  and  P,  Rx  determines  a  chain  but  not  a  cycle  in 

PL  ®Q,QX  ®R,Rl,P. 

The  notions  of  chains  and  cycles  axe  fundamental  in  our  applications. 

Given  a  proof-structure  S  in  MLL,  a  formula  A  €  S  and  a  path  V  in  S,  we 
define  e-p(A),  the  empire  of  A  relative  to  V ,  in  the  same  way  as  e(A)  in  section 
(3.4),  except  that  condition  ( v )  is  now  replaced  with 

(v)'  for  any  U-link  in  5,  if  ail  the  premises  X  of  the  link  such  that  V  X  axe 
different  from  A  and  all  belong  to  ep(A),  then  the  conclusion  belongs  to  ep(A). 
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5.2.  No  Vicious  Circles  versus  No  Cycles. 

Can  we  determine  the  structure  of  inference  in  an  equivalent  way  by  the  method  of 
chains  and  of  empires? 

The  answer  is:  chains  allow  an  analysis  of  deduction  in  a  more  general  context  than 
empires. 

In  order  to  make  the  answer  precise,  suppose  the  connectednss  condition  is  satisfied 
by  a  proof-structure  S.  If 

C  :  Ao  <g>  Bo  —  A\  <g>  By  —  . . .  —  An  <g>  Bn  —  Ao  ®  B0 

is  a  chain  where  for  0  <  i  /  j  <  n,  Ai  ®  B{  yk  Aj  ®  Bj,  then  by  the  Proposition 
below  there  is  an  i  <  n  such  that  C  C  e(A,-)  U  e(B{).  It  is  easy  to  see  that  in  this 
case  the  vicious  circle  condition  is  violated. 

Conversely,  if  the  vicious  circle  condition  is  violated  in  S ,  consider  a  substructure  S' 
of  «S,  such  that  there  A  contains  a  the  conclusion  of  a  link  with  the  following 

property.  If  So  is  e(A)  U  e(B)  in  S',  then  the  vicious  circle  and  connectedness 
condition  axe  satisfied  in  S0  and  e(A)  D  e(B)  ^  0.  Such  S'  can.  always  be  obtained, 
by  deleting  links  of  S  in  a  suitable  way.  By  the  Tiling  Lemma  (section  4.3),  A  €  e(B) 
or  B  €  c(A).  By  the  previous  paragraph  there  is  no  cycle  in  So-  By  the  Lemma 
below  there  is  a  chain 

C  :  B  —  A\  ®  Bx  —  ...  —  An  ®  Bn  -  A 

where  if  we  let  Aq  ®  Bq  be  A  ®  B,  then  for  0  <  i  /  j  <  n,  A,  <g>  B,  yk  A}  ®  Bj.  It 
follows  that  S  contains  a  cycle. 

Remark.  Given  a  proof-structure  5  in  MLL,  the  results  below  in  this  section 
together  with  the  the  above  argument  prove  that  if  the  connectedness  conditions 
holds  then  the  vicious  circle  condition  is  equivalent  to  the  condition  there  is  no 
cycle.  On  the  other  hand,  it  will  be  shown  in  section  (8.3)  that  the  condition  there 
is  no  cycle  is  a  consistency  requirement  that  applies  to  more  general  situations, 
when  the  connectedness  condition  fails. 
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Proposition  Let  S  be  a  proof- structure  for  MLL  satisfying  the  vicious  circle  and 
connectedness  conditions.  Let  V  be  the  set  of  axiom  links.  If  C  =  Co  0  Do  —  ...  — 
Cn  <S>  D„  is  a  pure  chain,  then  there  is  an  i  <  n  such  that  C  C  e(C^)  U  e(D{). 

Proof.  Suppose  C  (£  e(Co )  fl  e(£>o).  Consider  the  first  j  >  0  such  that  Cj  £  e(D0)- 
Notice  that  Dj-\  €  e(Z?o).  This  is  trivial,  if  j  —  1  =  0;  if  j  -  1  ^  0,  D}-X  e(Do) 
would  imply  Cj- 1  ^  e(D0).  Therefore  there  must  be  a  door  D  of  e(Do)  such  that 
D  -<  Cj.  Since  e(D0)  H  e(Cj)  ^  0  and  Cj  £  e(Do),  by  the  Tiling  Lemma  we  must 
have  e(Do)  $  e(Cj).  Furthermore,  by  the  definition  of  empire  this  fact  implies 
Co  €  e(Cj). 

If  Cj  €  e(Co),  then  D  €  e(Co)  fl  e(Do),  contradicting  the  vicious  circle  condi¬ 
tion.  Therefore  Cj  $  e(Co)  and  by  the  Tiling  Lemma  we  must  have  e(Co)  £  e(Cj). 
Hence 

e(C0)Ue(D0)  £  e{C})Ue(D}). 

Now  we  repeat  the  argument  and  find  Cj>  ®  Dj>  with 

e(Cj)  U  e(Dj )  £  e(Cj>)  U  e(Dj>), 

and  so  on.  Since  at  each  step  a  different  C*  0  Dk  is  considered,  after  at  most  n  +  1 
steps  we  find  a  C,  0  D,  satisfying  the  Proposition.  ■ 

Lemma.  Let  S  be  a  proof- structure  for  MLL  let  V  be  the  set  of  axiom  links  and 
suppose  there  is  no  cycle.  For  all  A,  B  in  S,  if  B  €  e(A)  and  B  -fc  A,  then  there  is 
a  pure  chain  A'  —  C  —  B' ,  where  A  ■<  A1  and  B  •<  B' . 

Proof.  Let  r^A j  represent  a  normal  computation  of  B  €  e(A).  C  is  constructed  by 
selecting  formula-occurrences  in  the  nodes  of  some  suitable  empire- sequence  of  r^. 
Starting  from  B,  we  scan  the  steps  of  an  empire- sequence  of  r^Ay  We  proceed  in 
stages  and  in  each  stage  we  proceed  alternatively  “upwards”  and  a  “downwards”, 
according  to  the  form  of  the  steps  in  the  empire-sequence.  If  the  last  step  in 
is  of  the  form  (|),  then  we  are  in  a  “upward”  part  of  the  empire- sequence  and  we 
let  B'  be  the  lowermost  formula-occurrence  of  S  considered  at  that  stage.  By  the 
construction  below,  this  is  a  conjunction  C  =  D\  0  D?.  Otherwise,  we  let  B'  =  B 
and  we  are  in  the  “downward”  part  of  the  empire-sequence. 
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Stage  p,  Downward  Part :  we  have  a  normal  tree  ending  with  a  step  of  the  form 
(I)  or  (-U-)-  Starting  from  X,  by  the  part  (it)  of  the  Proposition  in  Section  (4.1.1) 
we  find  a  formula-occurrence  X j  belonging  to  an  axiom  link  •  •  •  X,  •  •  •  Xj  •  •  •  such 
that  Xj  X  X  and  after  a  step  (~j)  from  the  node  X,  to  the  node  Xj  the  branch 
ends  with  a  sequence  of  steps  of  the  kind  (j.)  or  (JJ.).  Let  be  the  subtree  of 
ending  with  X,.  Since  is  normal,  so  is  r^j  and  moreover  the  last  step  of 
has  the  form  (t).  Next,  we  consider  Vi  and  proceed  through  the  “upward”  part  of 
the  empire-sequence. 

Stage  p,  Upward  Part:  we  have  a  normal  tree  ending  with  a  step  of  the  form 
(f).  By  part  ( i )  of  the  Proposition  in  Section  (4.1.1),  either  X  ■<  A  and  we  axe  done 
or  there  exists  a  formula-occurrence  C  ~  D\  ®  D2  such  that  X  -<  C,  say  X  X  D, 
and  every  empire- sequence  in  ends  with  a  pair  of  steps  (J.^)^’  (T®)^  with 
j  *,  followed  by  a  sequence  of  steps  of  the  form  (|).  Consider  the  subtree 
of  j  ending  with  C .  Since  is  normal,  is  normal  and  ends  with  a  step 
of  the  form  (J,).  We  go  to  “stage  p  +  1,  we  consider  and  proceed  through  the 
“downward”  part  of  the  empire-sequence. 

Each  sequence  of  the  tree  is  finite  and  at  each  stage  we  consider  a  shorter 
sequence.  Thus  the  procedure  must  eventually  end  when  we  reach  A  in  scanning 
the  “upward”  part  of  the  empire-sequence.  We  obtain  the  chain 

C  =  A  -  Cn  -  ...  -  Ci  -  B' 

as  follows.  Cp  is  the  lowermost  conjunction  considered  during  the  p-th  stage  and 
Cp  —  Cp-i  by  the  axiom  •  •  • ,  X*,  •  •  •  ,X;  considered  during  the  p-th  stage,  where 
!  7^  Ji  Xj  x  Cp — j  and  Xt'  X  Cp. 

Next  we  need  to  find  a  pure  chain.  Let 

C  —  A  —  E\  ®  F\  —  ...  —  En  ®  Fn  —  B' 

be  the  chain  given  by  the  above  procedure  and  suppose  C  is  not  pure.  Since  is 
normal,  then  A  ^  Ei  ®  Ft  ^  B'  for  all  i  and  if  i  ^  j ,  then 

D,  =  E}  and  E,  =  Dj , 


Di  =  Dj  and  E,  =  E:, 
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are  impossible.  Let  0  <  i  <  j  <n.  There  are  four  possibilities: 

(1)  Ei®Fi  ■<  Fj,  or  A  x  F,  (2)  Ej  0  F,  ■<  Et,  or  F'  -<  F, 

(3)  Et®Fi-<  Ej,  or  A  ^  Fj  (4)  E,  0  Fj  -<  F„  or  B'  -<  F,. 

We  show  that  cases  (1)  and  (2)  yield  a  cycle  and  in  cases  (3)  and  (4)  we  can  consider 
shorter  chains.  In  case  (1)  we  have  the  cycle 

Ej  0  Fj  p,  —  Ei+i  0  Fi+i  —  ...  —  Ej~ i  ®  Fj- 1  —  Ej  0  F; 

or  the  cycle 

Ej  0  Fj ^  —  Ei  0  Fi  —  ...  —  Fj_i  0  F;_i  —  F;  0  F; 
and  in  case  (2)  the  cycle 

Fi  0  F  —  Fi+i  0  Fi+i  —  ...  —  Fj_ i  0  Fj_i  —  Ej  F,  0  F:. 

or  the  cycle 

Fi  0  Fi  —  Fi+i  0  F+l  •  •  •  Fn  0  Fn  B'  F,  0  F,. 

Case  (3)  yields  the  shorter  chain 

A  -  ...  -  F,_  i  0  Ft_i  -Ej  Fy  0  Fj  -  Ej+i  0  Fj+i  -  ...B' 
or  the  shorter  chain 

—  . . .  —  F,_ i  0  Fi_i  —  je\  Fj  0  Fj  -  Fj+j  0  Fj+i  —  .B' 

or  the  shorter  chain 

A'  —  ...  —  Fj+i  0  Fj+i  —  ...  B' 
where  A'  is  Ej  0  Fj,  and  case  (4)  the  shorter  chain 

A  —  ...  -  F,  0  Fifv  —  Fj+i  0  Fj+]  —  •  •  •  B' . 
or 

A  —  ...  —  B" 

where  B"  is  F,  0  Fi .  By  repeating  this  argument  we  eventually  find  a  pure  chain 
as  desired.  ■ 
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5.3.  Connectedness  and  Minimality  of  Paths. 

The  notion  of  a  minimal  path  is  considered.  It  is  shown  that  if  S  is  a  structure 
and  the  path  V  is  the  set  of  axiom-links  of  S,  then  the  minimality  of  V  is  equivalent 
to  the  connectedness  condition  for  S. 

Proposition.  Let  S  be  a  proof- structure  in  MLL. 

(i)  Let  V,  V  be  paths  in  S.  If  V  is  a  subset  of  V  and  V  A,  then  V  B,  for 
all  B  belonging  to  tv(A),  the  empire  of  A  relative  to  V . 

(ii)  Given  A,B  €  S  and  a  path  V  in  S,  if  for  all  X  such  that  X  -<  B  and  ■  ■  ■  X  ■  ■  ■  € 
V  we  have  X  €  e-p(A),  then  B  €  e-p(A). 

Proof,  (t)  By  induction  on  the  empire  of  A  relative  to  V.  The  induction  step  is 
immediate  in  the  case  of  clauses  ( i )  —  (Hi)  and  (v)  —  (vi).  In  the  case  of  clause  (i v) 
we  use  the  relevance  condition  on  conjunctions. 

(ii)  By  induction  on  the  logical  complexity  of  B.  ■ 

Multiplicative  Disjunction  Lemma.  Let  S(T)  be  a  proof- structure  in  MLL. 
Let  V  be  a  path  in  S.  Then  V  is  minimal  if  and  only  the  connectedness  condition 
relativized  to  V  holds,  i.e.,  if  for  all  A,B  such  that  V  > —*  A  and  V  »->  B  and  either 
Grorj4UB€5we  have  A$B. 

Proof.  (=>)  Suppose  V  is  minimal,  A,  B  €  T  or  AU B  G  S,  V  A  and  V  \ -+  B,  but 
A  £  e(B).  Let  V  be  obtained  from  V  by  removing  all  axiom  links  •  ■  •  A',,  •  •  •  such 
that  Xi  €  e(B),  for  some  i.  We  show  that  the  set  V  is  nonempty  and  satisfies  the 
relevance  condition  on  conjunctions,  i.e.,  V'  is  a  path,  contradicting  the  minimality 
of  V. 

Consider  any  conjunction  C  such  that  C  $  z(B),  but  C  contains  a  door  D  of 
e(B).  Say  C  =  E®F,D-<F  and  let  -  CH  be  the  corresponding  link.  G  cannot 
be  a  multiplicative  conjunction,  since  in  this  case  D  should  be  J9,  but  we  assume 
that  B  is  either  a  conclusion  of  S  or  a  disjunct  in  A\J  B.  Thus  G  is  D  L!  H .  Then 
H  i  e(B)  and  V  ~  H. 

From  part  (ii)  of  the  above  Proposition  it  follows  that  we  must  have  X}  £  e(B) 
for  some  X j  occurring  in  an  axiom  link  •  •  •  Xj  •  •  -  €  V  such  that  X}  -<  H.  But  then 
Xk  e(B)  for  all  k ,  thus  •  •  •  X}  •  •  ■  €  V  and  V  ►  H.  Therefore  V  >— *  F. 
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Since  C  was  an  arbitrary  conjunction,  the  relevance  condition  for  conjuncts 
is  satisfied  and  V  is  a  path  for  5,  contradicting  the  minimality  of  V.  Therefore 
A  €  e(B).  Simmetrically,  we  prove  B  €  e(A). 

(-<=)  Suppose  there  is  a  proper  subset  V  of  V  such  that  V  is  still  a  path  for  S. 
Suppose  and  V  */+  X. 

If  X  €  T,  choose  Z  G  T  such  that  V  t— >  Z.  Such  Z  exists,  since  V  is  nonempty. 
Also  P  h  2  since  V'  C  V.  Since  X,Z  €  T,  we  have  X()Z,  by  connectedness 
relatively  to  V.  By  part  ( i )  of  the  previous  proposition,  V  Z,  since  Z  €  e(JA),  a 
contradiction. 

Otherwise,  we  may  suppose  that  X  is  premise  of  a  link  such  that  V  >->  Z . 
Notice  that  o  cannot  be  since  V  satisfies  the  relevance  condition  on  conjuctions. 
Thus  o  must  be  LJ.  Now  P  h  2,  since  V'  C  V  and  therefore  by  our  assumption 
XC'Z,  relatively  to  V.  By  part  (i)  of  the  above  proposition,  V  Z,  a  contradiction. 

■ 

Remark.  In  case  A ,  B  occur  in  T  or  if  is  a  link,  it  is  still  true  that  A^B  for 

the  relativized  notion  of  empire  implies  e-p(B)  =  e-p(A).  Namely,  ev(B)  C  zv{A) 
follows  from  part  ( i )  of  the  Shared  Empires  Lemma  (section  4.3)  and  the  remark 
that  no  step  j  ^  can  occur  in  any  computation  of  e-p(R),  since  A  is  either  a 
conclusion  of  S  or  a  disjunct  in  A  U  B.  Symmetrically  we  prove  e-p(A)  C  e-p(B). 
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6.  Proof-Networks  for  Linear  Logic. 

We  consider  now  an  alternative  representation  of  derivability  in  the  fragment 
MALL.  The  notion  of  Family  of  Quasi- Structures  is  a  development  of  the  notion 
of  slicing  of  a  proof-net  in  Girard  [1987b],  section  6.  The  problem  of  a  correct 
representation  of  logical  derivability  in  such  data-structures  (see  Remark  6.3.  in 
Girard  [1987b] )  is  solved  by  considering  the  families  that  result  from  the  slicing  of 
an  arbitrary  proof-structure  and  by  providing  a  set  of  conditions  that  characterize 
proof-network ,  namely,  the  families  representing  derivation  in  MALL. 

We  introduce  the  notion  of  a  quasi-structure,  which  is  like  a  proof-structure, 
except  that  the  n-links  are  unary  and  there  are  no  Contraction  links.  Given  a  proof- 
structure  we  consider  the  family  of  quasi-structures  that  can  be  appropriately 
embedded  in  Sv  and  that  satisfy  a  certain  maximality  property.  The  set  of  all  such 
embeddings  is  our  interpretation  of  Girard’s  notion  of  a  slicing.  The  same  family 
of  quasi-structures  corresponds  to  two  different  proof-structures  that  differ  only  by 
a  permutation  of  a  ®-link  with  a  n-link.  This  representation  solves  the  problem 
of  the  uniqueness  of  the  Normal  form  for  MALL.  Pairs  of-structures  that  differ 
only  by  the  permutation  of  a  <g)-link  with  a  il-link  correspond  to  a  commutative 
reductions  in  Gentzen-Prawitz’s  Natural  Deduction,  therefore  our  representation  is 
a  step  towards  the  solution  of  a  long-standing  problem  of  Proof- Theory. 

6.1.  Families  of  Quasi-Structures. 

Definition,  (i)  Structures  are  defined  in  section  (3);  embeddings  (and  more  gener¬ 
ally,  maps  preserving  a  link )  are  defined  in  section  (3,3). 

(ii)  A  Quasi- structure  Q  is  defined  as  a  proof-structure  for  MALL,  except  that 
(1)  there  are  no  contraction  links  and  (2)  the  n-links  have  only  one  premise: 

x  y 
xn Y  xny 

(Hi)  Map  preserving  links  and  embeddings  are  defined  for  Quasi-structures  as  for 
Proof-structures. 

(iv)  A  segment  a  in  S ^  is  a  sequence  of  occurrences  Co,. .  .,C„  of  the  same  formula 
with  the  property  that 
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(1)  Co  is  not  the  conclusion  and  Cn  is  not  the  premise  of  a  Contraction  link; 

(2)  if  0  <  i  <  n,  then  C,+i  the  conclusion  of  a  Contraction  link  with  premise 

C,. 

Given  segments  —  C0,...,Cm  and  <72  =  Do,...,Dn,  then  (with  some  abuse  of 
terminology)  we  say  that  o\  and  <72  are  conclusions  of  an  axiom  link  if  and  only  if 
Co  and  Do  are;  if  Cm  is  a  premise  of  a  link  with  conclusion  Do,  then  we  say  that 
o i  is  a  premise  and  <72  is  a  conclusion  of  the  link.  In  this  case  we  write 

<7]  <7  2  <7] 

-  or  — . 

a  a 

( v )  We  generalize  the  notion  of  link- preservation  as  follows.  If  Q  is  a  quasi-structure 
and  is  a  proof-structure,  consider  any  map  m  :  Q  — ►  S We  say  that  m  preserves 
an  axiom  link 

Pu-,Pk 

if  there  axe  segments  <7lv  ,.,ak  in  S v  and  an  axiom  Q\,...,Qh  such  that  for  all 
j  <  m(Pj)  €  <7j  and  a j  is  a  conclusion  of  Qi, . . . ,  Q/,.  Moreover,  we  say  that  m 
preserves  a  link  different  from  a  n-link,  of  the  form 

Ai  Ai  ^4 

- ^ —  or  — , 

B  B 

if  there  are  segments  oq,  <72,  a  and  a  link  in  Sv  of  the  same  kind  of  the  link  in 
question,  such  that 

<7l  <72  <7] 

-  or  - . 

<7  <7 

Finally,  we  say  that  m  preserves  a  n -link 

A 

B 

in  Q ,  if  there  is  a  ri-link  in  S v  if  there  are  segments  <7j,  <72,  u  and  a  fl-link  in 
such  that 

a 

B  €  o  emd  for  i  =  1  or  2,  A  G  <7,.  An  injection  m  preserving  links  is  called  an 
embedding  if  m(A )  <v  ^4. 
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( vi )  Let  Struct  be  the  category  whose  objects  O  are  either  proof-structures  or 
quasi-structures  and  whose  morphisms  are  embeddings. 

(vii)  Let  Struct*  be  the  category  whose  objects  (O,  A)  axe  structures  with  a  selected 
conclusion  A  and  whose  morphisms  are  embeddings  preserving  links  and  selected 
formula-occurrences  —  we  say  that  m  :  ( 0,A )  — ►  (O',  A')  preserves  the  selected 
formula-occurrence  if  m(A)  =  A'. 

Remark.  Let  i  :  O  — ♦  O'  be  a  morphism  of  Struct,  i  is  an  embedding  of  quasi¬ 
structures,  if  O’  is  a  quasi-structure,  am  embedding  of  proof-structures  if  both  O 
and  O'  axe  proof-structures.  In  such  cases  links  are  preserved  in  the  sense  of  section 
(3.3). 

We  consider  the  assignments 

Times  (Oi,  A ),  (O2,  B )  ►  (Oi  ®  O2,  A  ®  jB); 

Pin, 

o 

Some  (O,  A)  ►-»  (- — -,3x.A). 

Bx.A 

Fact.  The  assignment  Times  determines  a  functor  Struct*  x  Struct*  — ►  Struct*. 
The  assignments  Plus  and  Some  determine  a  functor  Struct*  —*  Struct*.  ■ 

Given  a  proof-structure,  we  consider  all  quasi-structures  that  axe  embedded  in 
the  given  proof-structure  and  we  select  the  family  of  those  which  are  maximal  in 
the  following  sense. 

Definition,  (i)  Given  t,  :  Q  —>  in  the  category  Struct  and  A  €  Q,  let  a  a  be 
the  segment  a  in  S ^  such  that  t(A)  €  o.  Let  V(S^)  be  the  set  of  subsets  of  S^.  We 
define  a  map  ia  :  Q  — *  V(Sv)  by  the  assignment  A  1— >  a  a- 

(ii)  Let  Di,. .  .,Dn  be  the  conclusions  of  Q  and  let  Cj,. .  .,Cm  be  the  conclusions  of 
Sp-  We  say  that  a  morphism  1  :  Q  — *  5^  in  the  category  Struct  strongly  preserves 
the  conclusions  if  m  =  n  and  for  all  i  <  n,  Ci  €  ia(Di). 

(Hi)  We  say  that  a  morphism  1  :  Q  — *  Sv  in  the  category  Struct  and  its  domain  Q 
axe  maximal  if  the  following  condition  is  satisfied: 
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for  every  i'  :  Q'  — >  S^,  if  i'  strongly  preses  conclusions,  then  Q  C  Q'  implies 

Q  =  Q'. 

( iv )  We  let  Fam  S ^  be 

{Q  :  the  set-inclusion  map  is  a  maximal  morphism  i  :  Q  —*  Sv  in  Struct}, 
arid  we  let  Fam  be 

[Q-^S^  :  l  is  the  set-inclusion  map  and  is  a  maximal  morphism  in  Struct). 

(iv)  Given  a  proof-structure  S^,  we  say  that  Fam  strongly  preserves  the  axioms  (in 
Sv)  if  for  each  Q  in  Fam  S ^  there  is  an  i  :  Q  — *■  strongly  preserving  axioms  — 
i.e.,  for  every  axiom  Pi, . . .  ,P*  of  Q  there  is  an  axiom  P[, . . .  ,P'k  of  <SV  such  that 
P[  €  tff(Pi),  for  all  z  <  k. 

Example.  Consider  the  following  proof-structure  S^>. 


A _ A _ 

AHA-1  All  Ax 


Fam  consists  of  the  following  quasi-structures  Q\  and  Qi'. 


A  M _ A  A 1  AA _ A 

A  n  A-1  A  U  Ax  and  A  n  Ax  A  U  A1 

Notice  that  here  Q\  and  Q2  must  contain  non-logical  axioms  and  Fam  cannot 
strongly  preserve  the  axioms  in  S^. 
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6.2.  Empires  in  a  Family  of  Structures. 

The  notion  of  empire  is  generalized  to  families  of  quasi-structures.  Conditions 
are  given  to  characterize  the  class  of  families  that  represent  correct  derivations. 
Such  families  will  be  called  proof-networks.  It  seems  that  this  representation  fulfills 
Girard’s  description  as  the  ‘absolute  limit  for  a  parallelization  of  the  syntax’  (Girard 
[1987b]  p.94),  since  the  vicious  circle  and  connectedness  conditions  for  a  family  are 
reduced  to  independent  verifications  of  the  same  conditions  for  each  quasi-structure 
of  the  family. 

Definitions,  (i)  Given  A  £  S^>,  consider  the  set  of  all  the  formula  occurrences 
A',  A" ,. . .  in  all  the  Q  £  Fam  S The  relation  that  holds  between  A1  and  .4"  if 
and  only  if  there  are  i' ,  i"  in  Fam  such  that  i'(A')  =  i"(A")  =  A  is  an  equivalence 
relation.  Let  [A.]  be  the  corresponding  equivalence  class  of  formula-occurrences.  For 
all  Q  £  Fam  let  Aq  be  the  element  in  Q  Pi  [A],  if  such  an  element  exists.  Thus 
when  we  write  Aq  we  assume  that  Q  (1  [4]  ^  0. 

(ii)  For  any  T  and  any  Q  £  T  the  definition  of  empire  of  A  in  Q  is  as  in 
section  (3.4),  except  that  clause  ( iv )  applies  now  to  the  n-links  finks  and  there  are 
no  contraction  finks.  We  say  that  F  satisfies  the  vicious-circle  [the  connectedness 
conditions]  if  every  Q  £  F  satisfies  it. 

(in)  Let  F  —  Fam  Sv.  The  empire  e[A]  of  an  equivalence  class  [.A]  is  a  set  of 
equivalence  classes,  defined  as  follows:  [B]  £  e[A]  in  F  if  and  only  if  for  every 
Q  €  F  we  have  Ba  €  e(Ac  ),  i.e,  if  and  only  if  for  every  Q  £  F  such  that  Bq  exists, 
also  Aq  exists  and  Bq  €  e(Ag)  in  Q. 

(iv)  The  box  condition  for  a  family  T  =  Fam  S v  of  quasi-structures  is  the  condition: 

Fam  strongly  preserves  the  axioms  and  for  every  D,D'  £  S v  if  <p(D)  =  'f(D') 
then  [L>]0[D'].  Notice  that  by  definition  of  < p,  the  formula-occurrences  D  and  D' 
considered  here  are  doors  of  e(Xt)  in  Sv,  for  some  fink  ^~n  . 

( v )  Let  J-  =  Fam  S ^  and  let  a  and  b  be  eigenvariables  associated  with  f\x.A 
and  f\y.A',  respectively,  where  f\x.A  occurs  in  Q\  and  f\y.A'  occurs  in  Q2  and 
Qi,  Q-2  £  T .  We  say  that  a  and  b  are  identified  if  and  only  if  [.A(a)]  =  [j4'(6)]  in  T . 
When  we  speak  of  an  eigenvariable  a  in  F,  it  must  be  understood  that  we  refer  to 
the  equivalence  class  of  eigenvariables  identified  with  a. 
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( vi )  Let  T  —  Fam  <5^,.  We  define  the  relations  <°  and  <<  between  (equivalence 
classes  of)  eigenvariables  in  T  as  follows.  Given  [/\x.A(x)]  and  [/\y.£(y)]  in  IF, 
let  a  and  b  be  the  (equivalence  classes  of)  eigenvariables  associated  with  / \x.A  and 

A  y-B. 

Then  a  <°  b  if  and  only  if  the  eigenvariablc  b  occurs  outside  and  inside  c[A(a)\. 

Let  <t  be  the  transitive  closure  of  <°. 

( vii )  The  parameters  condition  is  the  requirement  that  <t  in  T  is  strict. 

(mil)  Let  T  —  Fam  S^.  J-  is  a  proof  network  if  every  quasi-structure  Q  in  T 
satisfies  the  vicious  circle  and  connectedness  conditions  and  if  T  satisfies  the  box 
and  parameter  conditions. 

6.3.  Equivalence  Theorem. 

The  proof  of  the  following  facts  is  a  straightforward  induction  on  the  definition 
of  S lfi. 

Facts.  Let  S ^  be  inductively  generated  (see  clauses  (0)  -  (7)  in  sections  3.1  and  3.2). 

(i)  (clauses  (0),  (1),  (1)’  and  (1)”)  If  Sv  is  an  axiom,  then  Fam  S ^  =  {S^}. 

(ii)  (clause  (2))  If  Sv  has  the  form 

A®B  Sy"  i 

where  <5^,  and  <S"„  do  not  share  any  formula- occurrence,  then  Fam  S<p  is 
{Q'  A® B  Q"  '■  Q'  £  Fam  S'^,  and  Q"  €  Fam 


and  for  each  Q'  a® bQ",  Q'  and  O"  do  not  share  any  formula- occurrence. 
(iii)  (clauses  (5)  and  (6))  If  has  the  form 


or  — — 


then  Fam  S ^  i 


3x.A(x)  A  ©  B  ’ 


O' 
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respectively. 

(iv)  (clauses  (3)  and  (4))  If  has  the  form 

s 5;, 

A  U  B '  'ix.A(x)  ’ 

where  the  eigenvariable  associated  with  'ix.A(x)  does  not  occur  in  the  conclusions 
of  Sv,  then  Fam  S v  is 


(_e L 

UUB 


:  Q*  €  Fam 


or 


I  Vx.A(ar) 


:  Q'  G  Fam 


(v)  (clause  (7))  If  S' , (A1 ,  A)  and  S”„(A" ,  B)  are  inductive  proof-structures  that  do 
not  share  any  formula- occurrence,  and  A,  A'  and  A"  are  different  occurrences  of  the 
same  sequence  D\,  D2,. . Dn  and  S v  is  S'  U  S"  U  A  U  {A  PI  B}  with  the  addition 
of  the  links 

D\  D"  K  K  A  B 

Di  D„  A  U  B 

then  Fam  S ^  is 


{— 

\a\ib 


:  Q'  €  Fam  S'v,  |  U  | 


Q! 

AHB 


:  Q!  G  FamS'^Y 


(vi)  Fam  Sy,  preserves  the  axioms  of  Sv.  ■ 

Proposition.  Let  Sv  be  a  proof- structure  for  MALL  and  suppose  Fam  Sv  is  a 
proof-network.  Then  for  each  1  :  Q  —>  Sv  in  Fam 

(1)  for  each  link  of  S ^  different  from  a  PI  and  a  Contraction  link,  the  premises  of 
the  link  are  in  ic(Q )  if  and  only  if  the  conclusions  are; 

(2)  for  all  n*  and  Contraction  links  of  Sv 

(2.1)  one  and  only  one  premise  of  such  a  link  is  in  ta{Q)  if  and  only  if  the  conclu¬ 
sions  are; 

(2.2)  if  <p(Y)  —  <p(Z),  then  Y  is  in  ia(Q)  if  and  only  if  Z  is; 

(3)  S as  a  set,  if  the  union  of  all  the  Q  in  Fam  S 

Proof.  The  proof  is  straightforward  from  the  definition  of  Fam ,  by  the  property  of 
maximality  of  each  embedding  in  it.  The  Box  condition  for  proof-network  is  used 
to  obtain  (2.2).  ■ 
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We  can  prove  now  the 

Equivalence  Theorem,  (i)  Let  S ^  be  a  proof- structure  satisfying  the  vicious- 
circle ,  connectedness  and  box  conditions.  Then  for  all  X,  Y  E  S^,  Y  E  e(X)  if  and 
only  if  [y]  E  e[X ]  in  FamS 

(ii)  Sv  is  a  proof-net  if  and  only  if  Fam  S is  a  proof-network. 

Proof.  If  Sv  satisfies  the  vicious-circle,  connectedness  and  box  conditions,  then  it 
is  inductively  generated  as  a  propositional  structure.  Hence  we  can  use  induction 
on  <Sy,  to  prove  part  (i)  and  to  show  that  if  the  vicious  circle,  connectedness  and 
box  conditions  hold  for  S^,,  then  they  hold  also  for  Fam  S To  finish  the  proof 
of  part  (ii),  “only  if”  direction,  we  use  part  ( i )  and  conclude  that  the  parameters 
condition  is  preserved  in  the  passage  from  S ^  to  Fam  S ip.  To  prove  (ii),  “if” 
direction,  we  show  that  if  X  —  Fam  S ^  is  a  proof-network,  then  S ^  satisfies  the 
box  condition.  By  induction  on  the  number  of  Pl-links  in  S^,  we  reduce  to  the 
case  of  substructures  with  nonlogical  axioms  in  the  multiplicative  fragment  with  ©. 
In  this  fragment  proof-structures  and  quasi-structures  coincide  and  Fam  S  =  {5}. 
Hence  satisfies  the  vicious  circle  and  connectedness  condition.  The  fact  that 
satisfies  the  parameters  condition  is  then  immediate  by  (i). 

Part  (i).  By  induction  on  the  definition  of  Sv  we  show  Y  E  e(X)  if  and  only  if 
[y]  E  e[X].  If  5  is  an  axiom,  this  is  clear.  If  S  results  from  a  clause  (3)  —  (6) 
in  the  inductive  definition  of  proof-structure,  then  this  fact  is  immediate  from  the 
induction  hypothesis. 

Clause  (2).  If  S v  is  5^  a®b  let  X1  =  Fam  and  X2  =  Fam  S 22.  By  Fact 
(ii)  above,  every  quasi-structure  in  X  =  Fam  S ^  has  the  form  Q1  a® b  Q2,  where 
Q1  €  X1  and  Q2  E  X2. 

Suppose  X  and  Y  occur  in  S^.  By  induction  hypothesis,  Y  E  e(A')  in  if 
and  only  if  [y]  €  e[X]  in  X1 ,  i.e.,  if  and  only  if  for  all  Q  E  X1,  if  [y]  fl  Q  ^  0,  then 
yc  E  e(Xc).  Since  X  and  Y  both  occur  in  Q1,  by  the  Fact  (ii)  in  section  (3.6)  we 
have  y  E  e(X)  in  Q1  a®b  Q 2  if  and  only  if  Y  E  e(X)  in  Q1 .  Thus  in  this  case  the 
result  follows.  The  same  argument  holds  if  X  and  Y  occur  in  S2 . 

Now  suppose  that  Y  occurs  in  52,  X  occurs  in  51  and  Y  E  e(X)  in  <5.  Then  by 
the  Fact  (i)  in  section  (3.6)  X  ^  A  and  A®B£  e(X)  and  by  induction  hypothesis 


102 


Section  6 


Aq  £  e(Ac  )  for  all  Q  £  A1 .  It  follows  that  (A®B)a  £  e(Ac  )  for  all  Q  £  A.  Since 
e(B)  =  Q 2 ,  by  connectedness  for  <22,  we  have  Q 2  C  e(A')  by  induction  on  e(B) 
in  Q  =  Q}  a® b  Q 2-  Since  this  holds  for  all  Q  6  A,  we  have  [Y]  £  e[A]  in  A ,  as 
desired. 

Conversely,  if  Y  ^  e(Ar)  in  5,  then  it  is  easy  to  show  that  also  A  ^  e(Ar), 
thus  by  induction  hypothesis  there  is  a  C1  in  A1  such  that  either  [Ar]  D  Q1  =  0 
or  A  x  £  X  x.  Choose  Q 2  such  that  Y exists.  Then  by  the  Fact  (it)  above, 
Q  =  Q}  a®  B  Q2  is  in  A.  Also  Q  is  such  that  Yq  exists,  but  if  Xq  exists,  then 
Yq  £  Xq,  by  the  Fact  ( i )  in  section  (3.6).  We  conclude  that  [Y]  $  e[A’]. 

Clause  (7).  If  SV(C\, . . . ,  Cn,  A  fl  B)  results  from  S1  and  S 2  by  clause  (7),  then  the 
lowermost  links  of  S  are 

C[  C['  C'n  C”  A  B 

Cl  ■"  Cn  AnB 

and  A  —  Fam  ( S consists  of  quasi-structures  of  the  forms 

Q1  Q2 

Ci...  Cn  A  and  '  Ci...C„  B 

An  B  An  B 

where  Q}  €  A1  =  Fam  (S1)  and  Q2  £  A2  —  Fam  («S2).  By  the  Substructure 
Theorem  for  MALL  (section  4.5),  for  all  A',  Y  £  S  we  have  the  following  cases: 

(1)  if  both  X  and  Y  occur  in  S'  then  Y  €  e(A)  in  S  if  and  only  if  Y  €  e(A)  in  S', 
for  z  =  1,2; 

(2)  if  X  occurs  in  S1  and  Y  occurs  in  S2,  then  Y  $  e(A)  and  X  £  e(Y); 

(3)  if  Y  occurs  in  S 1  or  in  S2  and  A  is  one  of  Ci,...,Cn,  AnB,  then  Y  £  e( A)  and 
A  i  e(Y). 

It  is  easy  to  check  that  the  corresponding  conditions  hold  for  A.  For  instance,  if 
[Y]  £  A1  and  [A]  =  [C,],  then  Q1  C  e(Ac, )  for  all  Q1  £  A1,  by  connectedness  and 
[A]  i  e[Y],  since  [A]  n  Q2  ±  0  and  \Y]  n  Q2  =  0  for  all  Q2  £  A2. 

Pari  (ii),  ( only  if).  Let  ^(T)  be  a  proof-net  for  MALL  and  let  A(T)  =  Fam 
The  inductive  definition  of  S v  induces  an  inductive  generation  of  every  quasi- 
structure  Q  €  A,  by  the  Facts  (i)  —  ( v )  above.  It  follows  that  every  Q  £  Fam  (Sv) 
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is  an  inductive  structure  in  the  fragment  MLL  extended  with  one-premise  rules, 
which  are  irrelevant  for  the  verification  of  the  vicious  circle  and  connectedness  con¬ 
ditions.  Therefore  the  structure  theorem  in  section  (3.6)  still  applies  and  each  Q 
satisfies  the  vicious  circle  and  connectedness  condition.  The  box  condition  follows 
the  Fact  ( v )  above,  from  the  Box-Door  Lemma  (section  4.5)  applied  to  S \p  and  from 
part  (i).  The  parameters  condition  is  immediate  from  part  (i). 

Part  (if),  (if).  Given  a  proof-network  F  ~  Fam  S^,  the  conclusions  T  of  S ^  belong  to 
ia(Q ),  for  every  i  :  Q  — >  in  Fam ,  by  definition.  Thus  for  any  C  6  T,  [C]  H  Q  0. 
Consider  any  fink 

X'  X" 

X 

in  with  the  following  property: 

(*)  [X]  H  Q  ^  0  for  all  Q  €  T ,  but  [X']  ft  Q  =  0  for  some  Q. 

Then  the  fink  in  question  must  be  a  (1-  or  a  Contraction  link,  by  parts  (1)  and 
(2.1)  of  the  above  Proposition.  By  part  (2.2)  of  the  same  Proposition,  X  belongs 
to  a  sequence  A  of  the  form  Cy , . . . ,  Cn,  A  I~1  B,  where  Cy C„  are  conclusions  of 
a  Contraction  link  and  A  t~l  B  is  the  conclusion  of  a  Mink.  It  follows  immediately 
from  (2.2)  that  every  formula-occurrence  in  A  is  a  conclusion  of  a  link  with  the 
property  (*).  Let 

Ai , . .  ■ ,  Ap 

be  all  the  distinct  sequences  C^i , . . . ,  C,  n. ,  A,  n  Bi  whose  elements  are  conclusions 
of  links  with  the  property  (*).  It  follows  immediately  from  (2.2)  that  if  X  €  A,  and 
Y  €  Ay,  with  i  j,  then  we  cannot  have  X  Y  nor  Y  -<  X. 

Choose  one  of  the  Ai,  say  A  =  C\,...,Cn,A  n  2?,  and  let  S'^,  be  the  struc¬ 
ture  whose  formula-occurrences  are  those  in  A  together  with  their  ancestors,  and 
whose  links  and  flagging  function  are  the  restrictions  of  the  links  and  of  the  flagging 
functions  of  Sv  to  the  set  in  question.  We  need  to  show  that 

(I)  is  a  substructure  of  S^. 

To  prove  (I)  it  is  enough  to  show  that  the  set-inclusion  map  i'  :  S ' ,  — ♦  S^> 
strongly  preserves  the  axioms.  Let  P\ , . . . ,  Pn  be  an  axiom  of  that  is  not  strongly 
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preserved  by  i' ,  say  P\  X  D  €  A  and  Pn  A.  Every  D  £  A  is  the  conclusion  of  a 
link 


D'  D" 


D 


thus  either  P\  x  D'  or  P\  X  D" .  By  the  definition  of  Fam  ( S and  by  part  (3)  of 
the  above  Proposition,  there  is  a  l  :  Q  — >  such  that  Pi  £  i^iQ)  and  P„  6  t<r(Q) , 
hence  i  does  not  strongly  preserve  P\, . . .  ,Pn.  This  contradicts  the  box  condition 
for  Fam  (S^),  The  proof  of  (I)  is  finished. 

Let  A!  =  C[, . . .  ,C'n,  A  and  A2  =  C" , . . . ,  C",  B,  be  the  sets  of  formula  oc¬ 
currences  in  Sv  flagged  with  A ,  and  with  B,  respectively.  Let  and  be  the 
structures  defined  as  follows.  The  formula-occurrences  of  £* .  are  those  in  A,  to¬ 
gether  with  their  ancestors,  and  the  links  and  flagging  function  are  the  restrictions 
of  the  links  and  of  the  flagging  functions  of  S ^  to  the  set  in  question.  By  an  ar¬ 
gument  similar  to  that  of  the  previous  paragraph  we  can  show  that  the  axioms  are 
strongly  preserved  by  the  inclusion  of  S^.  in  S'^,,  i.e.,  that  S'Vi  is  a  substructure  of 
S'y,  and  of  5V,  for  i  =  1,2.  We  need  to  show  that 

(II)  For  i  =  1,2,  Pi  =  Fam  S^.  is  a  proof-network. 

Notice  that  every  quasi-structure  Q,  in  P,  =  Fam  S'^.  is  a  substructure  of  a 
quasi-structure  Q  in  P  =  Fam  <SV.  It  is  immediate  that  every  quasi-structure  in 
Pi,  Pi  satisfies  the  vicious  circle  condition,  since  every  structure  in  P  does. 

We  need  to  show  that  the  connectedness  condition  is  satisfied  in  each  Q1  €  Pi, 
i  =  1,2.  Suppose  C  and  D  are  either  premises  of  a  U-link  or  formulas  flagged  with 
A  in  Q!  6  P\.  Q!  is  a  substructure  of  a  quasi-structure  Q  €  P  and  CAB  in  Q  by 
the  Box  condition.  By  the  proof  of  the  Lemma  in  section  (5.2),  there  is  a  pure  chain 
C'c  —  C—dD'  where  each  X  €  C  has  the  form  C,  0 Dx.  We  need  to  show  that  every 
such  C{  <8)  Di  occurs  in  Q' .  Suppose  not.  Then  we  have  E  X  C,  and  F  X  D,  such 
that  E  and  F  are  flagged  with  A.  As  a  consequence,  EQF,  and  again  by  the  same 
Lemma  we  obtain  a  chain  E'e  —C'—f  F' ,  thus  a  cycle  (C,  ®  F,)e  —  C'~f  (C,  ®  F,) 
in  Q ,  a  contradiction.  Thus  Q'  satisfies  the  connectedness  condition,  as  required. 

It  is  immediate  that  Fam  strongly  preserves  the  axioms  in  Pi,  Pi.  An  argument 
similar  to  that  in  the  previous  paragraph  can  be  used  to  conclude  the  proof  that 
Fam  satisfies  the  box  condition.  The  proof  of  (II)  is  concluded. 
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Let  be  the  substructure  of  S ^  complementary  to  S^, .  We  prove 
(III)  Fam  is  a  proof-network. 

i 

It  is  easy  to  show  that  T  satisfies  the  connectedness  condition:  simply  notice 
that  every  Q  in  T  is  the  complementary  substructure  of  a  quasi-structure  Q'  €  T'  in 
a  quasi-structure  Q  €  P\  and  apply  the  Substructure  Theorem  for  MLL  (extended 
with  unary  links)  (section  4.3). 

To  prove  that  every  Q  €  T  satisfies  the  vicious  circle  condition,  we  assume 
that  there  is  a  cycle  in  Q  and  we  may  assume  that  in  such  a  cycle 

C  :  uZv  —  •  •  •  —  Xc  —c"Y~---—uZv, 

C' ,  C"  belong  to  the  nonlogical  axiom  A.  Furthermore,  we  may  assume  that  only 
X  and  Y  are  connected  by  the  nonlogical  axiom  A  (otherwise,  we  may  shorten  the 
cycle).  Now  C',  C"  are  flagged  with  A ,  thus  C'QC"  in  Q  by  the  box  condition.  By 
the  proof  of  the  Lemma  in  section  (5.2),  there  is  a  pure  chain 

X'c,  -  C  -C"  Y' 

and  we  may  suppose  that  such  a  chain  occurs  inside  the  substructure  Q'  of  Q.  By 
the  choice  of  C  no  element  of  C'  other  than  X'  and  Y'  is  an  ancestor  or  a  successor 
of  any  element  of  C  other  than  X  and  Y .  Therefore  we  may  construct  a  cycle 

C"  :  vZy  —  ...  —  Xc  —  C'  —c"  Y  —  . . .  —jj  Zvi 

in  Q,  a  contradiction. 

To  prove  that  T  satisfies  the  box  condition,  it  is  easy  to  show  that  [£>]<>[£>']  in 
Fam  (<%•),  for  ail  D,  D'  in  ( S ■$)  such  that  Tp(D )  =  v(D'):  an  argument  similar  to 
that  in  the  proof  of  the  connectedneas  condition  for  T  applies  here  as  well.  Thus  it 
is  enough  to  show  that  Fam  strongly  preserves  the  axioms  in  (<S^).  Now  the  axioms 
of  are  either  axioms  of  S v  or  A. 

Let  P\,. . .  ,Pn  be  an  axiom  of  such  that  Pj  €  Q  and  Pn  ^  Q.  The  only 
possibility  is  that  Pn  X  A,  say  Pn  -<  Aj.  By  an  argument  similar  to  that  of  part 
(I)  we  find  a  Q  €  P  such  that  Pj  €  Q  and  Pn  £  Q,  contradicting  the  Box  condition 
for  T. 
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Suppose  Fam  does  not  strongly  preserve  the  axiom  A,  i.e.,  for  some  Ej,  E2  and 
for  some  Q  in  T,  A  =  Ei  U  E2,  Ei  C  Q  and  E2  H  Q  =  0.  This  implies  that  in  <S^, 
for  every  formula  occurrence  X  €  E2  there  is  some  sequence  A'  =  Y\ ,. .  .,Y(,Z\  n  Z2, 
different  from  A,  such  that  X  -<  A'.  The  same  must  be  true  in  Sv,  and  this 
contradicts  the  choice  of  A.  The  proof  of  (III)  is  finished. 

We  can  therefore  apply  the  induction  hypothesis  to  J-\,  Ti  and  T  =  Fam  (5^-), 
since  by  (II)  and  (III)  they  are  proof-networks  with  lower  number  of  fl-links.  We 
conclude  that  5^,  S £2  and  ( S satisfy  the  propositional  conditions  for  proof-nets. 
Since  S'^,  results  from  <5^  and  <S£2  by  an  application  of  clause  (7)  in  the  inductive 
definition  of  proof-structures  (section  3.2),  we  conclude  that  S 1 ,  satisfies  the  propo¬ 
sitional  conditions  for  proof-net  too.  Since  S v  results  by  substituting  the  proof- 
structure  S' ,  for  the  nonlogical  axiom  A,  of  the  proof-structure  (<S^),  it  follows 
that  Sv  satisfies  the  propositional  conditions  for  proof-nets,  by  the  Substructure 
Theorem  for  MALL,  section  (4.5).  ■ 

6.4.  Notes  on  Noncommutative  Linear  Logic. 

We  sketch  a  treatment  of  the  systems  NCMALL  for  noncommutative  linear 
logic.  Definition.  A  proof-structure  S  for  (noncommutative)  first  order  NCMLL 
is  defined  as  a  proof-structure  for  commutative  MLL,  together  with  a  cyclic  order 
<  of  the  conclusions  of  S  satisfying  conditions  (1),  (2)  in  section  (3)  and  in  addition 
the  following  condition  (3)’.  Extend  <  to  a  lexicographical  ordering  on  S,  by  letting 
X  <  Y  if  and  only  if  U  <  V,  where  U  and  V  are  conclusions  and  X  ■<  U  and  Y  ■<  V . 

(3)’  planarity  condition:  (see  Girard  [1989a],  II. 9)  If 

T77X~X~7.  and  . . .  Ym  . . .  Yn  . . . 

arc  any  pair  of  .distinct  axiom  links  then  in  the  induced  ordering  we  cannot  have 

A\  <  Ym  <  Xj  <  Yn. 


The  planarity  condition  for  NCMLL-  can  be  summarized  by  saying  that  in 
the  plane  of  the  page  in  which  a  proof-structure  is  written,  there  is  no  crossing  of  the 
axiom  links.  Notice  that  this  property  is  preserved,  if  a  cyclic  permutation  is  applied 
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to  the  conclusions  of  S.  In  the  case  NCMLL,  the  ordering  of  the  occurrences  of  1 
is  irrelevant.  More  generally,  7  A  U  B  =  B  U  7 A.  Mappings  preserving  links  must 
preserve  <  .  The  above  definition  is  immediately  extended  to  Quasi-Structures. 

Definition.  A  proof- structure  S  for  ( noncommutative )  first  order  NCMALL  is 
defined  as  a  proof-structure  for  commutative  MALL  together  with  a  cyclic  ordering 
<  .  It  satisfies  conditions  (1),  (2),  (4)  and  in  addition  the  following  property: 

(3)”  Fam  preserves  <  and  every  quasi- structure  in  Fam  ( S \p)  satisfies  the  planarity 
condition. 

The  definition  of  an  inductive  proof- structure  for  NCMALL,  sections  (3.1) 
and  (3.2),  is  similar  to  that  for  the  commutative  case;  in  addition,  we  inductively 
define  <  .  Write  T  =  X0, .  ■  ■ ,  AT„_i ,  where  for  i  =  0, . . . ,  n  —  1  (mod  n),  Ar,  <  Ar,+1 . 

In  clause  (2)  if  S'  has  conclusions  A0, . . . ,  An_i ,  A  (mod  n  +  1)  and  S"  has  con¬ 
clusions  B,B0  . . .  ,Bm- 1  (mod  m  +  1)  then  S'  a®  b  S"  has  conclusions  if  S'  has 
conclusions  Co,. . . ,  Cn+m  (mod  n  +  m  4-  1)  where  C,  =  A,  for  i  =  0, ...  ,n  —  1, 
Cn  -  A®  B  and  Cn+j+ 1  =  Bj  for  j  =  0, . . . ,  m  -  1.  If  the  new  link  introduced 
in  clause  (2)  is  a  cut-link,  then  the  conclusions  of  S'  a®  a1-  3X6  Co, ... ,  Cn+m_ j 

(mod  n-fm)  where  Cj  =  Ai  for  i  =  0, . . . ,  n  —  1  and  Cn+>  =  Bj  for  j  =  0, . . . ,  m  —  1. 

In  clause  (3)  if  S'  has  conclusions  Co,...,C„  (mod  n  +  1)  with  C„_i  =  A  and 
Cn  =  J9,  then  S  has  conclusions  Co, . . . ,  Cn-i>  (mod  n)  with  C„_i  =  A  U  B. 

In  clause (7),  S'^, ,  <S"„  and Sv  have  conclusions  Cq,  . . .  ,C'n,  Cq  , . . . , C"  and  Co, . . . ,  C„ 
(mod  n  +  1),  respectively,  where  we  require  that  Ct  ~  C[  ~  C"  for  i  =  0, . . . ,  n  —  1 
and  C„  =  C'n  n  C".  In  all  other  clauses  the  ordering  is  also  preserved. 

The  definition  of  empire  is  unchanged.  Proof-nets  are  defined  as  before,  with 
the  new  notion  of  proof-structure.  Since  all  the  fundamental  notions  are  indepen¬ 
dent  of  the  restrictions  induced  by  <  on  a  proof-structure,  the  Main  Theorem  in 
section  (4)  and  the  Equivalence  Theorem  (section  6.3)  carry  through  to  the  non¬ 
commutative  case.  In  particular,  the  map  n  :  V  — *  Sv  between  derivations  and 
proof-structures  for  NCMALL  is  defined  as  in  section  (3.7).  The  Tiling  Lemma 
and  Substructure  Theorem,  sections  (4.3)  and  (4.5),  still  hold.  The  sequentialization 
theorem  also  holds,  as  we  can  see  from  the  following  argument. 
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Proof  of  the  sequentialization  theorem  for  NCMLL-.  (see  section  4.4.1). 
In  the  difficult  case,  given  a  proof-net  S  with  conclusions  Co, . . .  ,Cn  (mod  n  +  1), 
we  break  the  final  link  of  a  conclusion  C,  and  we  partition  Co,. .  .,C,_ j,  A,  B , 

C,+i,  . . .,  Cn  into  two  classes.  By  applying  a  cyclic  permutation  to  the  conclusions, 
if  necessary,  we  may  assume  that  Co  is  in  the  class  which  A  belongs  to,  and  that 
Cj+i,. .  ,,C„  are  not.  Therefore,  C,+ 1,. .  .,Cn  are  in  the  same  class  as  B. 

Suppose  now  that  some  Cj  is  in  the  same  class  as  B,  for  0  <  j  <  i,  Then  by 
the  connectedness  condition  there  must  be  C*,  with  0  <  k  <  i,  such  that  Cjt  is 
connected  to  one  of  B,  Cj+i,. .  .,Cn,  by  an  axiom  B,  B-1,  say  P  <Ck  and  B **•  -<  B. 
For  the  same  reason  there  must  be  some  D  and  E  in  the  same  class  as  A ,  such 
that  D  <  Ck  <  E  and  D  and  E  are  connected  by  an  axiom  Q,  QL,  say  Q  X  D  and 
Qx  -<  E.  We  are  in  the  following  situation: 

Co  . . . ,  D , . . . ,  Cjt, .  • .  5  E, . . . ,  A,  B,  Ct+i  7  •  •  •  >  Cn. 

In  conclusion  in  S  we  have  axioms  B,  Px  and  Q,  Qx  such  that 

Q<P<Q±<P±. 

This  violates  condition  (3)’.  Therefore  Co,. .  .,Ci_i,A  all  belong  to  the  same  class, 
and  the  splitting  is  compatible  with  the  restrictions  on  the  noncommutative  case.  ■ 
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7.  Cut  Elimination. 

Let  SV(T)  be  a  proof-net.  A  Cut  link,  as  defined  in  section  (2.1),  has  a  ghost 
formula-occurrence  of  the  form  A  0  A1-  as  a  conclusion.  Since  A  0  A1  is  not  a 
formula  occurrence,  it  is  neither  a  premise  of  any  link  nor  a  conclusion  of  S^. 

Definition.  Let  CUT  be  the  set  of  ghost  formula-occurrences  in  S v  and  let 
A®  Ax  €  CUT.  A  cut-reduction  for  the  proof- structure  S ^  is  the  replacement 
of  $„(D  with  a  proof-structure  S'^,  (T)  with  a  set  CUT’  of  cuts,  such  that  A  0  Ax 
does  not  occur  in  CUT’,  but  one  or  two  new  ghost  formula-occurrences  of  lower 
logical  complexity  may  occur  in  CUT’. 

A  ghost  formula  occurrence  A  0  Ax  in  S^(T)  is  mapped  under  Fam  to  an 
equivalence  class  [  A  0  A ~L  1  in  T  —  Fam  ( S If  the  proof-structure  ^(T)  reduces 
to  <S;,(r),  then  the  result  of  a  cut-reduction  applied  to  the  family  Fam  (iS^T))  is 
defined  as  the  family  Fam 

There  are  as  many  cut  reductions  as  there  are  pairs  of  links  for  dual  logical 
symbols:  1/-L,  0/U,  I-!/©,  A  /  V-  Since  there  is  no  rule  nor  axiom  for  0,  there  is  no 
T /0  reduction.  There  is  a  commutative  T  reduction  by  which  a  T -axiom  ‘absorbs’ 
any  proof-structure  S  to  which  it  is  connected  by  a  0-link.  In  addition,  there 
are  commutative  11-reductions  for  proof-nets.  The  formalism  of  proof-networks  has 
been  designed  in  order  to  avoid  commutative  fl-reductions:  indeed,  if  S v  results 
from  S by  such  a  reduction,  then  Fam  (S<p)  and  Fam  (S^,)  are  the  same  set  of 
quasi- structures  (of  course,  since  <p  and  <p'  axe  different,  the  ‘box  condition’  applies 
to  different  classes  of  formulas  in  Fam  (Sv)  and  Fam  (S1^, ). 

It  is  clear  that  for  proof-networks  Normalization  and  Strong  Normalization 
coincide  and  that  the  Cut-free  proof-networks  obtained  by  any  two  sequences  of 
reductions  coincide. 

It  is  therefore  enough  to  show  that  if  Fam  ( 5 ¥,)  is  a  proof-network  then  so  is 
the  family  Fam  ( > ^ )  resulting  from  a  cut  reduction  ( Reduction  Lemma).  We  check 
the  vicious  circle  and  connectedness  condition  separately  for  each  Q  €  Fam  (5^); 
the  proof  is  simplified  by  the  use  of  the  method  of  chains  (section  5).  However,  it 
is  convenient  to  verify  the  parameters  condition  in  the  corresponding  proof-nets, 
using  the  Equivalence  Theorem  (section  6.3). 
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7.1.  Cut  Reductions  for  Proof-Nets. 

The  following  axe  the  cut-reductions  available  for  proof-nets  for  NCMALL 
and  MALL. 


•  Axiom  Reductions 


reduces  to 


•  1  Reduction 


reduces  to 


•  Times  Reduction. 


reduces  to 


•  With  Reduction. 

X[ 

X 


X  Xm , 

.  P  P X  Yu...,Yn 
P®PX 

Ah,., 

..,xm,Yu...,yn 

a,,...,a„ 

1  -L  l  ^  ^  — L  m  5 

x®  1 

X!,.. 

•  ,  An,  Xi , .  .  .  ,  Xm 

A  B 

B1-  A1- 

A®B 

(A®  B)  ®(A®  B)1- 

A 

A x  B 1  B 

A®  A1-  B±®B 

Si 

X"  •••  K 

s2 

1  A"  Ai  A2  j 

i  Xn  A\  fl  A2  Aj-  ®  A 


T 

2 


(Ai  nA2)®(A1  n a2)l 
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where  5i  =  e{A\ )  and  X[  ,...,X'n ,  A\  are  all  the  doors  of  e{A\ ),  and  S2  =  e{A2 )  and 
A2  axe  all  the  doors  of  e(A2),  reduces  to 

X\ ..  .Xn  A,  A± 

—  A,  ®  .4X 


•  /\  Reduction 

e(A(Q)) 

A{a)  A{t)x 

f\x.A  V  x.AL 
f\x.A  ®  ( f\x.A)L 

reduces  to 

e(A(t)) 

A(i)  Ait)-1 

Ajt)  ®  Ajt)1- 


where  Y\,...,Yn  axe  all  the  doors  of  e(j4x),  reduces  to 


T,Xi,.. .  ,Xm,  Yi, . . . ,  Yn 


•  Commutative  With  Reduction. 

S\  S2 

A:  A2  X[  X "  ...  X'n  XX  e(Xx) 

Ai  n  a2  X\  xn  x x  i , , . . . ,  y, 

.  Y„®XX 
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where  S i  =  e(Ai)  and  X\  A\  are  all  the  doors  of  e(Ai),  «S2  ~  e(A2)  and 

A’|',...,A’",  A 2  are  all  the  doors  of  e(A2)  and  Xn,  Yi,...,Ym  are  all  the  doors  of  e(A„), 
reduces  to 


Si  X'n®x‘£  e{X't) 
Aj  A2  A'J  X[' 


S2  X"®X"lr  e(X"n) 


XL  X': 


XL  X 


n-L 

n 


y  y" 

1 1  M 


y 


m 


} 


rit 

m 


A 1  n  a2  a  1 


X' 


Yi 


where  A,  X[ ,. .  Y(,...,YLn  3X6  ^  the  formula-occurrences  flagged  with  A 

and  B,  A",. .  .,A"_j,  Y" .  .,YfL  are  all  the  formula-occurrences  flagged  with  B.  A 
similar  reduction  is  defined  for  a  cut-link  with  conclusion  A",  ®  A,"1,  for  i  <  n. 

Remarks.  ( i )  The  axiom  reduction  presupposes  that  axioms  consist  of  atomic 
formulas.  In  the  most  general  case,  a  cut  link  occurrs  in  a  structure  <Si  a®  a-1-  S 2 
where  say  Si  is  an  axiom  and  <S2  is  not.  When  such  a  reduction  is  performed  it  is 
necessary  to  introduce  some  occurrences  of  A  in  the  axioms  of  S2.  This  is  a  process 
involving  arbitrary  choices. 

(n)  In  the  first  order  case,  we  assume  that  ghost  formula- occurrences  are  the  only 
formulas  in  the  conclusion  in  which  eigenvariables  may  occur. 

7.2.  Remarks  on  Reductions  for  Proof-Networks. 

Remark  1.  A  With  reduction  is  as  follows.  For  every  Q  6  T  such  that 
Q  fl  [(Ai  n  A2 )  <g>  (Ai  n  A^-1-  ]  7^  0,  Q  contains  either  a  configuration  of  the  form 
(1): 


Qi 

Ai  Af 

Ai  n  a2  AfeAf 
(Ai  n  a2)  ®  (a2  n  a2)x 


or  of  the  form  (2): 
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Qi 


A\  n  A2  Ax  0  A^~ 

(Ax  n  A2)®(Ai  n.4;)1 

where  i  7^  j.  Now  T'  is  obtained  from  T  as  follows:  In  the  case  (1)  we  replace  Q 
with  a  O'  of  the  form  (3): 

Qi 

At  Ai 

Aj  ®  Aj 

In  the  case  (2),  we  delete  Q. 

Remark  2.  A  Times  reduction  determines  the  following  situation. 


O 

:  e(A)  : 

i  e(B)  : 

:  2o  : 

A 

B 

Bx  Ax 

A®B  B±UA± 


(A  ®  B)  ®  (A  ®  B )± 


Figure  1.  A  tailing  of  Q. 


In  figure  1  Q0  is  e(BL)  —  e(A±)  and  Q  (corresponds  to)  the  complementary  sub¬ 
structure  of 


e(A)  e{B) 


A®  B  (A®  B)1- 


( A®B)®(A®B)± 
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O 

:  e(A)  : 

:  Qo  : 

;  e(B)  : 

A  A ±  B±  B 


A  ®  A 1 

Figure  2.  A  tailing  of  Q 


B±®B 


In  figure  2  we  have  O0  =  e(BJ")  D  e(Ax):  this  follows  from  the  Shared  Empires 
Lemma  (section  4.3,  extended  to  the  MALL  case)  and  the  fact  that  the  reduction 
step  does  not  affect  the  links  in  Qo  and  between  Qo  and  Q.  It  follows  also  that  if 
A',  Y  occur  in  Q0,  then  Y  £  e(X)  in  Q  if  and  only  if  Y  €  e(A)  in  Q'. 

Remark  3.  There  are  obvious  embeddings  among  the  substructures  obtained  by 
removing  all  finks  with  premises  A,  Ax,  B ,  B x  in  figures  1  and  2.  By  an  abuse  of 
language,  we  sometimes  identify  copies  of  the  corresponding  formula-occurrences. 
A  similar  remark  applies  to  figures  3  and  4  below.  By  a  further  abuse  of  notation,  if 
Xq  is  the  representative  of  [A]  in  Q,  we  sometimes  omit  the  subscript  Q,  assuming 
it  is  clear  from  the  context. 

7.3.  Strong  Cut  Elimination. 

Strong  Cut  Elimination  for  first  order  MALL.  Given  T  =  Fam  ( S ^),  every 
reduction  sequence  terminates  in  a  cut- free  Xo  ~  Fam  (5°0)  and  Xo,  regarded  as  a 
set  of  quasi-structures,  is  unique.  . 

We  must  prove  the  following: 

Reduction  Lemma.  If  X  =  Fam  («S¥,)( T))  is  a  proof-network,  and  S^(T)  reduces 
to  S'y,  (T)  by  application  of  a  cut- reduction,  then  X'  -  Fam  (S'^,  )(T))  is  a  proof- 
network. 
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It  is  clear  that  every  reduction  step  reduces  the  total  number  of  formula  occurrences 
in  the  proof- network.  We  work  with  finite  proof-networks,  thus  every  reduction 
sequence  terminates.  It  is  also  clear  that  normal  forms  axe  unique  in  the  sense 
specified  by  the  theorem.  Thus  to  prove  the  Strong  Cut  Elimination  Theorem  for 
MALL  we  need  only  prove  the  Reduction  Lemma.  We  will  use  extensively  the 
notions  of  path  and  chain  developed  in  section  (5). 

Let  T  be  a  proof-network  and  let  T'  be  the  result  of  one  reduction  step.  To 
prove  that  T'  satisfies  the  connectedness  condition  we  show  that  if  for  any  Q1  €  T' 
the  set  of  axioms  of  Q'  is  a  path  which  is  not  minimal,  then  there  is  a  Q  €  JF  such 
that  the  set  of  axioms  of  Q  is  a  non-minimal  path.  To  prove  that  T'  satisfies  the 
vicious  circle  condition  we  show  that  for  any  Q1  €  T' ,  if  there  is  a  cycle  in  Q!  then 
there  is  one  also  in  some  Q  €  T . 

Proof  of  the  Reduction  Lemma.  Commutative  T -reduction  Consider  the  com¬ 
plementary  substructure  of  e{A±)  in  the  given  structure  and  apply  the  Substructure 
Theorem  section  (4.5).  The  result  is  then  immediate. 

Commutative  n -reduction.  We  need  to  check  that  if  S'^,  is  the  result  of  the  reduction, 
then  A,  X[,. .  ,  Y{,...,Ym  axe  all  the  doors  of  e(A)  and  R,  X" , 

Y .  .,F"  are  all  the  doors  of  e(R)  in  S1^, .  In  other  words,  we  need  to  show  that 

e(Aj )  =  5i  e(X'n  ) 

and 

6(^2)  =  *5>2  e{X" n  ). 

The  definition  of  S,  and  easy  inductions  on  e(A’'"L)  and  e[X"X)  show  that  the  right- 
hand  side  is  included  in  the  lest-hand  s:  1  ;n  both  cases.  A  stanaai  u  argument 
contradicts  the  existence  of  a  normal  tree  r^\A\\  such  that  Z  is  the  first  formula- 
occurrence  not  in  5i  x'n  ®  x' x  €(^'n  )• 

Axiom  or  1  reduction.  Let  Q  £  F  and  let  O'  G  T'  result  from  Q  by  an  axiom  or  1 
reduction  (section  7.1).  Let  V  [V]  be  a  list  of  all  axioms  occurring  in  Q  [£>'].  Also 
let  A\  and  A2  be  the  indicated  axioms  of  Q  and  let  A  =  Xi, . . .  ,  A’m,l  1,  ...,}„  be 
the  axiom  resulting  from  the  reduction. 
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Connectedness.  Suppose  V"  is  a  proper  subset  of  V'  and  a  path  for  O' .  If  V"  does 
not  contain  A  then  V"  is  a  path  for  Q,  too;  otherwise  the  path  V"  obtained  by 
replacing  A\  and  A 2  for  A  in  V"  is  a  path  for  Q  and  this  is  a  contradiction. 

Vicious  circle.  Let  C  be 


C  ®  D  —  Ci  ©  Di  —  . . .  —  Ci  ®  Di  —  C|+)  ®  D,-+i  —  ...  —  Cn  ®  Dn  —  C  ©  D 

be  a  cycle  in  Q1 .  We  assume  that  A  is  used  in  C:  otherwise,  C  is  a  chain  in  Q 
too.  We  may  also  assume  that  an  axiom  in  V  is  used  at  most  once  in  C:  if,  say, 
Xi  x  D ,  Yj  x  Ci  and  X*  X  Dt,  Yi  X  Ci+ 1,  then  we  could  consider  the  shorter  cycle 
C  ®  D  —  Ci+i  ®  D{+i  —  . . .  —  Cn  ®  Dn  —  C  ®  D.  Therefore  suppose  that  X{  X  Dt 
and  Yj  X  C,+ 1 .  Then 

C  ®  D  —  Ci  ®  D\  —  . . .  —  Ci®  Di  —  P  <g)  PL  —  Ci+i  ®  Z>l+i  —  . . .  —  Cn®  Dn  —  C  ®  D 


or 

C  ®D  -Ci®Di  -  ...-Ci®Di~  1®  1  -  C,+i  <g>  Dt+i  -  ...-Cn®Dn-C®D 
is  a  cycle  in  Q. 

5oz  and  Parameters  Conditions.  For  all  formula  occurrences  A',  Y  in  Q',  Y  6  e(X) 
if  and  only  if  for  the  corresponding  A',  Y  in  Q  we  have  Y  €  e(X).  It  follows  that 
[T]  €  e[X]  in  J-'  if  and  only  if  [T]  €  e[X]  in  T .  The  box  and  parameters  Conditions 
follow. 

Times  reduction.  Every  quasi-structure  Q1  €  T'  resulting  from  the  reduction  step 
has  the  form  shown  in  figure  2  (section  7.1)  and  results  from  a  Q  £  T  of  the  form 
shown  in  figure  1. 

Connectedness.  Let  V  be  a  list  of  all  axioms  in  Q'.  The  elements  of  V  are  also 
(copies  of)  the  axioms  of  Q.  Suppose  V  is  a  proper  subset  of  V  which  is  a  path  for 
Q' .  We  need  only  to  consider  the  case  when  V  Ax  or  V  */+  B _L.  Notice  that 
since  V  satisfies  the  relevance  condition  on  conjuncts,  V  1/+  A  implies  V  >/+  Ax 
and  similarly  for  B.  By  the  connectedness  condition  for  Q ,  applied  to  (A  ®  B)x  = 
Ax  U  BL,  we  hav’e  A^QB1-  in  (S^.V)  and  obviously  this  fact  remains  true  in  O'. 
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By  part  ( i )  of  the  Proposition  in  Section  (5.3),  V  ■/+  and  V  t/+  It 
follows  that  V  */*  (A  ®  B)  ®  (A  ®  B)1-  in  Q.  But  e((A  ®  B)  ®  (A  ®  B)x)  =  Q, 
by  connectedness  for  Q  and  therefore  V  is  empty,  a  contradiction. 

Vicious  Circle.  Suppose  the  vicious  circle  condition  is  violated  in  Q' .  We  may 
assume  we  have  a  cycle  C'  containing  A  ®  AL  or  B  ®  BL\ 

C  ®  D  -  C\  ®  D\  -  ...  -  Ci®  Di  -  ...  -  Cj  ®  Dj - ...  -  Cn®  Dn  -  C  ®  D. 

and  we  show  that  there  is  a  cycle  C  in  Q.  (Here  we  consider  only  the  case  of 
Commutative  Linear  Logic.)  There  are  several  cases.  We  use  the  same  letters  for 
formula-occurrences  identified  by  the  embeddings  described  in  Remark  3,  section 
7.2. 

Suppose  C ,  =  A  and  £),  =  A1-  and  B  ®  Rx  does  not  occur  in  C .  Then  C  is  obtained 
from  C'  by  substituting  (A  ®  B)  ®  (A  ®  B)±  for  C,  ®  Dt.  Similarly  if  C,  =  B  and 
Dt  =  J5X  and  A  ®  A1-  does  not  occur  in  C' . 

Suppose  C{  —  A,  Dt  —  A1-  and  Cj  =  B,  Dj  —  B1.  Then  let  C  be 

C®D-  ...-  Ci_i  ®  Di- 1  -  {A  ®  B)  ®  (A  ®  B)-1  -  Cj+ 1  ®  Dj+ 1  -  . . .  —  C  ®  D. 

Suppose  C,  =  A,  D,  =  Ax  and  C;  =  Bx,  .Dj  =  B.  Then  let  C  be 

C®D-  ...-  C,_!  ®  Di- 1  -  A®  B  -  C;+1  ®  D_,+1  -  . . .  -  C  ®  D. 

Suppose  Ci  =  A x,  D,  =  j4  and  C,  =  Dx,  Dj  =  B.  Then  let  C  be 

C®D—. .  .—Ci-i®Di-i  —  4  ®  B)  ®  (A  ®  B )~L  (a®b)~C ]+\®D  j+\  —  ■ .  .—C®D. 

Finally,  suppose  C,  =  A x,  D,  =  A  and  Cj  =  B,  Dj  =  Bx.  Then  let  C  be 

A  ®  Ba  -  Ci+ 1  ®  D,+i  —  ...  -b  A®  B. 

In  all  cases  we  have  found  a  cycle  in  Q,  a  contradiction. 

Boi  Condition.  Given  T  =  Fam  («SV)  and  T*  =  Fam  (5^,) ,  notice  that  the  assign¬ 
ments  of  and  axe  the  same  (modulo  the  embeddings  described  in  Remark  3, 
section  7.2). 
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Consider  figures  1  and  2,  section  (7.2).  If  Xq  occurs  either  (1)  in  Q  or  (2)  in 
e(A )  or  (3)  in  e(B)  or  (4)  in  Co  and  Ax,£x  G  c(Xq),  then  by  the  Tiling  Lemma 
the  corresponding  formula  occurrence  A'o<  has  the  property  that  A  0  Ax  €  e(X 'q-  ), 
B  0  £x  G  e(XQ').  It  follows  that  for  every  Z  different  from  A  ©  Ax  and  B  0  ff  x , 
Zq<  G  e(Xg<)  if  and  only  if  Zq  G  e(A '.q).  In  this  case  we  conclude  that  [Z]  G  e[A'J 
in  X1  if  and  only  if  [Z]  G  e[A'j  in  T . 

Otherwise,  suppose  that  a  representative  (A'  n  l')o  of  [Ar  fl  F]  in  Q  occurs 
in  Co  let  Z  be  any  formula  occurrence  flagged  with  A'  or  Y,  say  <p{Z)  =  X.  We 
have  Zq  G  e(A q)  by  the  box  condition  for  T .  If  Zq  does  not  occur  in  e(A)  or 
e(B),  then  it  is  clear  that  Zq<  still  belongs  to  e(Xe').  So  assume  Zq  G  e(.4).  By 
the  vicious  circle  condition,  e(A)  fl  e(Ax)  =  0,  hence  Xq  £  e(A).  By  the  Tiling 
Lemma,  ACXq  and  it  follows  that  A®  B  €  e(Ac),  U  Ax  G  e(A'e)  hence 
AX,BX  G  e(A q,  contradicting  the  assumption  of  the  case. 

Parameters  Condition.  We  need  to  check  that  the  ordering  <t  of  the  eigenvariables 
is  strict  in  T\  assuming  that  it  is  such  in  T.  Let  f\  x.C  be  a  formula  occurrence  in 
Q  with  associated  eigenveriable  c.  We  say  that  c  is  critical  if  C(c)  (and  so  / \x.C ) 
occurs  in  So  and  only  one  of  Ax  and  Bx  belongs  to  e(C(c)). 

By  the  first  paragraph  in  the  argument  for  the  box  condition,  if  c  is  not  critical, 
then  for  all  X  different  from  (A  ®  B)  ®  (A  ®  B)x  ( A  ®  B )  and  (Bx  U  Ax),  we  have 
that  Xq  G  e(C(c))  if  and  only  if  X q>  G  e(C(c)),  hence  [A]  G  e[C(c)]  in  T  if 
and  only  if  [X]  €  e[C(c)\  in  T' .  Furthermore,  if  any  eigenvariable  c  occurs  in 
(A  ®  B)  ®  (A  ®  B)1,  ( A  <g)  B)  and  (Bx  U  Ax),  then  it  occurs  also  somewhere  in  <S0 
and  in  e(A)  or  e(£). 

Therefore  it  is  sufficient  to  consider  a  sequence  ao  <°  ai  <°  ...  <°  c  <° 
a, . . .  <°  an  in  T'  where  c  is  critical  and  it  is  sufficient  to  show  that  we  do  not  have 
c  <t  c. 

For  all  O",  write  Qq  for  e(Ax) fl e(£x)  in  Q" .  By  the  Shared  Empires  Lemma 
Qo  is  (isomorphic  to)  Q'0.  We  write  therefore  To  for  the  family  {Co  :  Q"  €  T), 
which  coincides  with  the  family  {Qq  :  Q"  G  T'}. 

Since  T  is  a  proof-network,  by  the  Equivalence  Theorem  (section  6.3)  there 
is  a  proof-net  S^.  and  by  the  Substructure  Theorem  (Corollary,  section  4.5)  the 
substructure  So^0  is  a  subnet.  By  part  ( ii )  of  the  proposition  in  section  (4.6)  the 
ordering  <t  in  is  the  restriction  of  the  ordering  <t  to  So^. 
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We  claim  that  for  all  eigenvariables  b  such  that  b  <t  c  in  T'  and  for  ail  Q"  G 
b  occurs  only  inside  e(C(c))  D  Qq  and  therefore  b  <t  c  already  in  T .  From  this  we 
conclude  that  c  <t  c  is  impossible  in  T*  since  c  <*  c  is  impossible  in  T . 

The  proof  of  the  claim  is  by  induction  on  the  length  of  the  sequence  c  =  ao  >° 
aj  >°  ...  >°  an  =  b  in  T* ,  where  a,  is  the  eigenvariable  associated  with  f\x,.A,. 
Since  by  induction  hypothesis  a,  occurs  only  inside  e[C{c)\  fl  [Qo],  and  a,  occurs 
outside  e[j4i+i],  we  cannot  have  e[C(c)]  D  [Q0]  C  e[>l1+i],  in  particular,  f\  x,+i  .Ai+\ 
must  occur  in  Q0. 

Therefore  we  can  argue  in  the  corresponding  proof-structure  So-  Since  a,  >° 
a,+ 1,  a'  occurs  inside  e(j4i+i(a,+i);  by  induction,  a,  occurs  only  in  e(C(c)).  Thus 
e(C(c))  fl  e(AI+1(al+i))  ^  0  and  not  C(c)CAf+i(al+i )  implies 
C(c)0>li+i(a«+i)  or  Aj+i(ai+i)tlC(c)  and  from  this  it  follows  that  a,+i  occurs 
inside  e(C(c)). 

Suppose  a,+1  occurs  outside  e[C(c)\  fl  [Qo]-  Since  in  T  we  have  e[C(c)]  = 
c[C(c)\  fl  [Qo],  it  follow  that  a1+i  >°  c,  a  contradiction. 

With  reduction.  Let  T'  be  obtained  from 

T  by  eliminating  a  ghost  formula-occurrence  (j4j  l“)  Ai)  ®  (Ai  I~1  J42)x. 

The  vicious  circle  and  connectedness  conditions  axe  obviously  satisfied  by  every 
Q'  €  since  the  transformation  of  a  Q  €  f  into  Q'  G  T'  in  this  representation 
involves  only  unary  links.  The  box  and  parameters  conditions  for  T'  are  immediate 
from  the  parameters  condition  for  T' . 

[ \  reduction.  Since  the  /\  links  and  the  \J  links  are  both  unary,  the  vicious 
circle,  connectedness  and  box  conditions  are  immediate.  In  order  to  prove  that 
the  parameters  condition  is  also  satisfied  in  this  case  it  is  convenient  to  apply  the 
Equivalence  Theorem  and  work  with  proof-structures  instead. 

The  application  of  a  f\  reduction  (section  7.1)  produces  the  following  situation 
(see  figures  3  and  4). 
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e(A(a))  :  : 

e(A(r)x)  : 

A(a) 

A(r)x 

f\x.A(x) 

V  X.A(x)X 

(A x.A(x))  ®(/\x 

A(x))x 

Figure  3.  A  tailing  of  S 

e(A(r)) 

A(r) 


c(^(r)X) 
A(r)r  ‘ 


A(r)  0  A(r)x 
Figure  4.  A  tailing  of  S'^,. 


Remark.  In  figure  4  e(A(r))  is  the  result  of  replacing  r  for  a  everywhere  in  e(A(a)). 
Since  a  does  not  occur  outside  e(A(o))  by  the  parameters  condition  for  5^,  it  is 
immediate  that  S  is  the  same  in  the  two  figures.  Also  if  A'  and  Y  are  formula 
occurrences  of  S’ ,  different  from  A(r)  0  A(r)x  then  there  are  formula  occurrences 
Xo  and  Yo  in  such  that  X  and  Y  result  from  Xo,  V"o,  respectively,  by  substituting 
every  occurrence  of  a  (if  any)  with  r  and  Y  €  e(X)  in  S'  if  and  only  if  V'o  €  e(X0) 
in  S. 
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We  need  to  check  that  if  the  ordering  <*  of  the  eigenvariables  is  strict  in  S'^, , 
under  the  assumption  that  it  is  strict  in  S tf>.  If  r  does  not  contain  any  eigenvariables, 
then  the  result  is  immediate.  Otherwise,  it  is  enough  to  prove  that  if  c  is  an 
eigenvariable  occurring  in  r  and  b  is  any  eigenvariable,  then  we  cannot  have  c  <° 
b  <t  c  The  proof  depends  on  the  following 

Fact.  If  b  <t  c  in  S'^,,  then  either  b  <t  c  or  b  <t  a  in  S 'v. 

Work  in  S Suppose  r  contains  the  eigenvariable  c,  where  c  is  associated  with  f\z.C 
and  let  b  be  any  eigenvariable  such  that  b  <t  a ,  where  b  is  associated  with  f \y.B . 
Since  c  occurs  only  within  e(C(c)),  -A(r)-1-  £  e(C(c)),  therefore  also  A(a)  £  e(C(c)). 

If  C(c)  occurs  inside  e(A(a)),  then  A(a)C’C'(c)  and  a  <°  c.  Then  b  <t  c  and  by 
the  Proposition  in  section  (4.6),  b  occurs  only  inside  e(C(c)).  If  C(c)  does  not  occur 
inside  e(A(a)),  then  A(a)CC(c)  and  e(A(a ))  C  e(C(c)).  Again  by  the  Proposition 
in  section  (4.6)  b  occurs  only  inside  e(A(a)),  therefore  b  occurs  only  inside  e(C(c)). 

Now  consider  S 1 ,  and  suppose  bn  <°  ...  <°  bo  =  c,  where  b,  is  associated  with 
f\y,.Bi.  Let  bl+ i  be  the  first  eigenvariable  such  that  the  following  holds  in  Sv: 
either  b,  <t  c, ,  for  some  c,  occurring  in  r,  or  6;  <t  a  but  not  <t  c,  for  all  c, 
occurring  in  r  nor  6t+i  <t  a.  By  the  above  Remark  it  must  be  the  case  that  in  S ' , 
but  not  in  we  have  bt+ \  <°  c  for  some  c  occurring  in  r.  We  show  that  this  is 
impossible.  We  must  consider  two  cases. 

Case  (1):  In  S a  occurs  only  inside  and  c  only  outside  e(B,+i(6t+i )).  This  im¬ 
plies  A(a)  €  But  f\yi+i.Bi+i  ^  f\x.A(x )  and  so  i4(r)x  £  e(Bl+i),  a 

contradiction 

Case  (2):  In  Sv,  c  occurs  only  inside  and  a  only  outside  e(2?j+i(fe,+i )).  This  implies 
A(r)x  £  e(Bi+i).  But  Bi+i  A(r)-1-  and  so  A(a)  £  e(B,+i),  a  contradiction.  This 
concludes  the  proof  of  the  Fact. 

If  for  some  c  occurring  in  r  we  have  b  <t  c  in  <S^(,  then  by  the  Fact  b  occurs 
only  inside  e(C(c ))  in  S ’v,  and  therefore  also  in  S' Hence  for  no  eigenvariable  b 
we  have  c  <°  b  <t  c  in  S ' ,  and  the  proof  is  finished.  ■ 
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8.  An  Extension. 


The  propositional  Direct  Logics  DL  and  DL+  axe  considered,  namely  the 
propositional  logics  formalized  in  the  propositional  sequent  calculus  for  MLL~  (i.e., 
propositional  Multiplicative  Linear  Logic  without  constants  1  and  _L),  with  in  ad¬ 
dition  either  the  rule  of  Mingle  (DL)  or  the  unrestricted  rule  of  Weakening  (DL+). 
For  these  fragments  we  provide  here  a  correct  proof  of  the  main  theorem  of  Ketonen 
and  Weyhrauch  [1984].  Extensions  to  larger  systems  (first  order  or  systems  with 
additive  connectives)  are  possible,  using  the  techniques  of  the  previous  chapters. 
We  are  mainly  interested  in  establishing  the  Structure  Theorem  and  the  Sequen- 
tialization  Theorem.  Cut-elimination  results  for  proof-nets  in  DL  and  DL+  are 
also  possible,  but  we  will  not  consider  them  here. 

By  the  Main  Theorem  for  MLL~  (section  4)  and  by  the  form  of  the  rule 
of  Mingle  we  know  that  a  proof-structure  representing  a  derivation  in  DL  may 
not  satisfy  the  connectedness  condition.  It  is  also  clear  that  in  a  proof-structure 
representing  a  derivation  in  DL+  some  formulas  may  occur  that  have  no  ancestor 
in  an  axiom-link. 

We  will  pro  re  that  the  condition  (1)  there  is  no  cycle  is  necessary  and  sufficient 
to  characterize  proof-nets  for  DL  and  that  the  conditions  (1)  there  is  no  cycle  and 
(2)  the  axioms  form  a  minimal  path  are  necessary  and  sufficient  to  characterize 
proof -nets  for  DL+. 

Consider  the  example  (4)  in  section  (3.5.1).  The  proof-structure  S  described 
there  has  the  form 


S  —  S\  (QfuPf)®(QfuPfuRl-)  S?  (S-‘-uQ£uP3-l)®(Q^uP4-l)  Si 3,  (t) 

where 


Si  :  : 


P2  Q-I  Qj  P2L  9L_IL  _ 9± 

P‘2  0  <?2  Q2  u  P-t  Qa  u  P\  Pa  0  Qa 
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and 


S2  : 


Pi  Q  i  Qt  Px  Qt  P3X  P3  Qz 

Pi  0  Qi  Qt  u  Px  P17  P  5  S*  Qj-  u  P3X  P3  ®  Qz 
Qj-uPj-uR1-  R®S  51uQ3iu  Px 


Consider  the  conclusions  of  S : 

Pi  C  Qi ,  P2  ®  C?2,  (Q^  U  P2X)  ®  (QX  U  Px  U  Px),  P  ®  5, 

(Sx  U  <?x  U  P3X)  0  (Q4X  U  P4x  ),  P3  0  Q3,  Pa®  Qi- 

It  is  clear  that  no  formula  occurrence  in  the  conclusion  contains  all  others  in  its 
empire  —  e.g.,  if  U  ic  p  ®  Q2  and  V  is  P4  0  Q4,  then  U  ^  e(V)  and  V  ^  e(I7),  etc. 
Therefore  no  cor  ■]’•  on  X  ®  F  has  the  splitting  property. 

5  =  e(I)Ue(F)U{X®F}. 

Let  S'  be  a  proof-structure  with  the  same  conclusions  as  S,  but  such  that  its 
axioms  form  a  minimal  path.  For  instance, 

S'  —  Si  (Qxupj.)<g>(c?.LUp.i.LjHx)  Si  {s±uQ^uP^)l®(Q^uP^)  S3 

where 

54  : 

Pf  U  Qi  P1  P  5  5X  P3X  U  Qj_ 

Px  u  U  Px  P  ®  S  Sx  U  P3X  u  Qj- 


If  we  consider  empires  relative  to  the  present  set  of  axioms,  then  by  the  argu¬ 
ment  in  section  (4.4.1)  we  still  obtain  conjuncts  with  the  splitting  property,  namely 
either  (Qj-  U  P2X)  ®  (Qj-  U  Pj-  U  Px),  or  P  0  5,  or  (Sx  U  Qj-  U  P3X)  0  (Q^-  U  P4X). 

It  is  also  clear  that  even  in  the  case  of  S  the  same  conjuncts  are  good  candidates, 
if  we  intend  to  split  the  structure  S  by  splitting  a  conjunct  X  0  Y.  However,  we 
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cannot  define  what  is  deductively  relevant  to  X  (notation:  RLV(Ar))  in  terms  of 
the  empire  of  X.  A  natural  idea  is  the  following.  First,  we  consider  the  set  of 
all  formula-occurrences  in  all  chains  that  start  at  X,  but  do  not  contain  X  <g)  Y 
(notation:  CH(X’));  next  we  add  the  set  of  all  formulas  that  are  connected  to 
CH(X)  by  an  axiom-link  but  do  not  belong  to  a  chain,  e.g.,  atomic  formulas  — 
let  &(X)  be  the  resulting  set;  finally,  we  let  RLV(X)  contain  all  occurrences  of 
subformulas  in  4>(X).  To  prove  the  Sequentialization  Theorem  for  DL  we  will 
show  that  if  the  conclusions  of  a  proof-net  S  contain  no  disjunctions,  then  there  is 
always  a  conjunction  X  ®Y  such  that  S  —  RLV(X)  U  RLV(K)  U  {X  ®  Y)  is  a 
partition. 

It  is  interesting  to  remark  that  if  the  set  of  axioms  of  S'  forms  a  minimal  path 
(Sequentialization  Theorem  for  DL+),  then  the  definition  of  what  is  deductively 
relevant  to  X  can  be  restricted  as  follows.  First,  we  consider  the  set  of  all  formula- 
occurrences  in  all  chains  without  repetitions  that  start  at  X,  but  do  not  contain 
X  ®  y  (notation:  Ch(X)).  Next  we  add  the  set  of  all  formulas  that  are  connected 
to  Ch(X)  by  an  axiom-link  (notation:  $(X)).  For  suitable  X  ®  Y,  this  will  also 
produce  a  partition.  This  analysis  provides  an  alternative  way  of  obtaining  the 
same  splitting  as 

5'  =  e(X)Ue(r)U{X®y}. 

We  need  to  specify  conditions  for  candidates  for  a  successful  splitting:  for 

Q±  D-l* 

instance,  P2  ®  Q 2  is  a  bad  candidate  in  5,  since  the  link  is  ‘trapped’  by 

ST 2  ur2 

the  conjunction  ( Q ?  U  P^)  ®  (Qj-  U  P ^  U  Rx).  The  situation  just  described  will  be 
called  a  loop  and  P2  ®  Q2  is  said  to  be  inside  the  loop. 

A  new  graph-theoretic  analysis  is  required  to  handle  loops  and  other  compli¬ 
cations  arising  in  the  sequentialization  process.  Consider  for  instance  the  proof- 
structure 


M  —  C\  (Qi.upj.)<8(R±.uR±)  Mi  (s^-us^iCJfQj-uPj-1-)  £2,  (  +  ) 


where 
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Mi  : 


Px  Px  R\  S  i  S2 

1 R?  u  R i-  i?i  ®  5i  i?2  ®  52 


52^  jj; 
52x  u  5x 


and 


Ci  : 


£2  : 


Pi  Qi 
Pi  ®C?1 


Qj  P£ 

Qt  u  Ax 


Qt  H 
Qt  u  Pt 


P2  Q  2 

P2  0  Q2 


Consider  the  conclusions  of  Ad : 

Pi  0  Qi ,  (Qi1  u  P1J-)®(/^-  U  Rl),  Ri®Si, 

R2  ®  52,  (52x  U  51x)  ®  (Q^  U  P2X),  P2  ®  £2- 

Here  (Qj1- UP1x)i8)(P2' Uijj1)  and  (S2LU5jL)<8>(Q2-UP2J')  have  the  splitting  property, 
but  Ri  <8>  Si  and  P2  <8  S2  do  not.  At  is  a  simple  example  of  a  maze.  We  say  that 
( Qi '  U  Px)  <g>  (i^  U  Px)  and  (S^-  U  5jL)  ®  (Q2  U  P2X)  Eire  outside  the  maze  and 
Ri  ®  Si  and  P2  <8>  52  axe  inside  the  maze. 

8.1.  The  Sequent  Calculus  DL. 

It  is  easy  to  see  that  in  the  calculi  DL  and  DL+  there  are  provable  disjunctions 
such  that  the  disjuncts  are  logically  irrelevant  to  each  other.  This  is  never  possible 
in  MLL,  and  the  property  that  A  is  logically  relevant  to  B  and  B  is  logically 
relevant  to  A  may  be  regarded  as  characteristic  of  the  meaning  of  A  U  B.  This  view 
is  justified  by  the  role  of  the  connectedness  property  in  proof-nets. 

In  the  context  of  DL  and  DL+  disjunction  has  an  ambiguous  meaning.  Suppose 
A  is  provable  and  in  DL"1"  we  derive  the  disjunction  of  A  and  B  after  introducing 
B  by  Weakening.  Such  a  disjunction  is  more  adequately  represented  by  A  ©  B 
than  by  A  U  B.  Moreover,  if  both  A  and  B  are  provable  and  in  DL  we  derive  the 
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disjunction  of  A  and  B  after  joining  the  contexts  by  Mingle,  then  the  meaning  of 
such  a  disjunction  is  different  from  that  of  both  ©  and  U. 

Therefore  it  is  convenient  to  use  the  language  CD  of  Direct  Logic  (Ketonen  and 
Weyhrauch  [1984])  and  write  A  for  ®  and  V  for  U. 

The  sequent  calculus  DL  for  propositional  Direct  Logic  has  the  axioms 

b  P,-P 


The  logical  rules  of  inference  are 

A  -  rule:  V  -  rule: 

hr ,A  b  A,  J3  \-T,A,B 

h  r,  a,  a  a  p  br,^vp 

The  structural  rules  are  Exchange  and  Mingle. 

Exchange:  Mingle: 

\-t,a,b,a  hr  hA 

hT,BM,A  t-T,A 

Let  DL+  be  the  system  which  is  like  DL,  but  contains  the  rule  of  Weakening 
instead  of  Mingle. 

Weakening 

k  r 

b  t,a 

(Clearly,  Mingle  can  be  eliminated  if  we  have  Weakening  and  DL  is  a  subsystem  of 
DL+.)  The  rule  of  Contraction 

b  t,a,a 
b  t,a 

is  not  allowed  in  DL  nor  in  DL+ . 
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8.2.  Paths  and  Structures. 

A  proof-structure  for  DL  or  DL+  is  defined  as  a  proof-structure  for  proposi¬ 
tional  MLL~  (section  3),  but  in  the  case  of  DL+  formula  occurrences  aie  allowed 
that  are  not  conclusions  of  any  link.  In  more  detail,  in  this  context  a  proof-structure 
is  a  nonempty  set  of  formula- occurrences,  together  with  a  set  of  links  between 
formula-occurrences.  Axiom  links  have  the  form 


P^P 

and  no.. -axiom  links  have  one  the  forms 

x  y  x  y 

X  A  Y  A  v  Y 

the  A  links,  V-links,  respectively.  Formula-occurrences  and  links  satisfy  the  prop¬ 
erties 

(1) '  every  formula-occurrence  the  conclusion  of  at  most  one  link; 

(2)  every  formula-occurrence  is  the  premise  of  at  most  one  link. 

(3)  A  link  is  regarded  as  different  from  the  link  Yy~*  •  The  axiom  link  P,  ->P 

is  identified  with  the  axiom  link  ->P,  P. 

As  before,  we  define  A"  ~  Y  as  “A"  and  Y  are  different  occurrences  of  the  same, 
formula" ,  and  A"  -<  Y  as  “Ar  is  an  ancestor  of  Y" .  In  this  context,  A'  X  1  is  clearly 
the  same  as  “A'  ta  a  subformula  of}'".  We  write  Ar  ~<  T  for  A”  X  }r,  for  some  }’  in 

r. 

The  notion  of  path  in  a  proof-structure  is  defined  in  section  (5.1 )  as  a  nonempty 
set  of  axiom  links  satisfying  the  relevance  condition  on  conjunctions: 

for  any  conjunction  having  any  ancestor  m  an  axiom,  both  conjuncts  have 
ancestors  in  some  axioms. 

As  before  we  write  V  >— ►  A  if  there  is  an  axiom  P,~^P  in  V  such  that  either  P  .4 
or  -'P  A. 

Conversely,  given  a  set  of  formula-occurrences  T,  consider  the  set  of  all 
occurrences  of  subformulas  in  T  and  identify  non-axiom  links  with  the  relation 
“  and  _  .  _  .  _  are  immediate  subformulas  of _ ". 
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Definition.  A  path  is  called  pervasive  if  for  all  atomic  subformulas  Q  in  5,  V  •— ►  Q 
( relevance  condition). 

Chains  and  cycles  are  defined  as  in  section  (5.1). 

8.3.  The  Main  Theorem  for  Direct  Logic. 

Definition.  A  proof-structure  S  =  (T^,V)  for  DL  is  a  proof-net  if  and  only  if 
there  is  no  conjunctive  cycle. 

The  main  theorem  (Theorem  4.4.)  of  Ketonen  and  Weyhrauch  [1984]  can  be 
formulated  as  follows: 

Theorem.  Let  T  be  a  sequent  containing  only  prentx  formulas. 

(i)  b  F  is  provable  in  DL  if  and  only  if  there  is  a  pervasive  path  V  for  T  such  that 
S  -  (T*,V)  is  a  proof-net. 

(ii)  h  F  15  provable  in  DL+  if  and  only  if  there  is  a  minimal  path  V  for  T  such  that 
S  =  (T^,V)  is  a  proof-net. 

In  the  rest  of  this  section  we  will  give  a  proof  of  the  theorem  in  the  propositional 

case. 


8.4.  Abstract  Chains. 

The  logical  connections  within  a  proof- structure  are  considered  in  abstract 
graph-theoretic  terms.  Chains ,  cycles ,  loops  and  mazes  axe  given  a  more  abstract 
definition. 

Let  G  =  (V,  E)  be  a  graph.  Let  F  be  a  set  of  subsets  of  V ,  with  the  property 

that  for  all  JFj ,  Fi  €  F,  F\  D  Fi  ^  0  implies  F\  C  F2  or  F2  C  Fj .  Also,  let  C  be 

a  set  of  distinguished  elements  of  F,  such  that  each  C  €  C  is  partitioned  by  some 

elements  A\ ,  A2, . .  •  of  F  U  V.  For  the  purpose  of  the  sequentialization  theorem,  we 

% 

may  assume  that  the  partition  of  each  C  is  binary. 

Remark  1.  The  intended  interpretation  of  a  G  is  as  follows. 

V  is  the  set  of  all  occurrences  of  atomic  subformulas  in  a  sequent  T. 

F  is  the  set  of  all  occurrences  of  non-atomic  subformulas  of  the  formulas  in  T 
C  is  the  set  of  elements  of  F  that  are  conjunctions. 

E  is  a  path  V  for  T,  as  defined  in  section  (5.1). 


Section  8 


129 


With  an  eye  to  the  intended  interpretation,  we  call  A\,Az,...  the  conjuncts  of  C. 

(i)  Given  (V,  E)  with  F  and  C  the  relevance  condition  on  conjunctions  is  the  fol¬ 
lowing  property:  for  each  C  €  C,  if  there  is  an  edge  E  with  an  vertex  in  C,  then 
for  each  conjunct  A,  of  C  there  is  an  edge  E,  with  a  vertex  in  A,. 

(ii)  Let  (V,E)  with  sets  F  and  C  satisfy  the  relevance  condition  on  conjunctions. 
E  is  called  minimal  (relatively  to  C)  if  no  proper  subset  of  E  satisfies  the  relevance 
condition  on  conjunction.  We  say  that  ( V,  E)  is  minimal  (relatively  to  C)  if  E  is 
such. 

(iii)  For  A,  B  6  F  U  V  with  A  f)  B  =  0,  say  that  A  and  B  are  connected  (write 
A  ||  B )  if  there  is  an  edge  e  in  E  with  vertices  v\  and  V2  such  that  V\  =  A  or  uj  6  A 
and  V2  =  B  or  V2  €  B. 

(iv)  Let  X,Y  €  C  such  that  X  D  Y  —  0  and  let  A,B  6  F  such  that  A  C  X  and 
B  C  Y .  We  write  Xa  ~b  Y  if  A  ||  B. 

(v)  We  write  a%b  if  for  some  C  €  C  such  that  C  C  X,  A  and  B  are  different 

conjuncts  of  C.  A  chain  is  a  sequence  Xi, . . .  ,Xn  such  that  —  ...  — 

(vi)  A  chain  X\ , . . . ,  Xn  is  -pure  if  for  all  i  ^  j  with  1  <  i,j  <  n ,  Xi  /  Xj. 

(vii)  If  C  =  X\, . . . , Xn  is  a  pure  chain,  then  aYb  —  C  —  a  Y  is  called  a  cycle  of  length 
n  +  1.  In  the  case  wnen  C  is  empty,  this  definition  implies  that  aYb  is  a  cycle  of 
length  1  if  A  ||  B. 

(viii)  Let  C  be  a  pure  chain.  Yg  —  C  —  a  Y  is  called  a  loop  if  not  aYb-  Y  is  the 
exit  of  the  loop.  When  Yb  —  C  —  a  Y  is  a  loop,  we  may  write  Yd  —  C  ~dY  ,  where 
A  C  D,  B  C  D  and  D  is  either  Y  itself  or  I?  is  a  conjunct  of  some  C  €  C. 

(ix)  An  element  A"  in  a  chain  C  is  terminal  if  for  all  Y,  Z,  if  Y  —  X  —  Z  then  we 
cannot  have  Y  <£  Z ,  Z  <£_  Y  and  F,Z  6  C. 

(x)  X  Y  iff  there  is  a  loop 

E  :  Z a  —  —  —  X  —  ...  —a  Z 
and  either  Y  =  Z  or  there  is  a  pure  chain 


C-.A  Zb-...-Y. 
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We  summarize  this  condition  by  saying  that  Y  dominates  the  loop,  which  A  belongs 
to. 

(xi)  X  >  Y  iff  X  Y  and  not  Y  Ah 

(xii)  Let  Ui  —  C\  —  Vi ,  ■ . .  ,Un  —  C„  —  Vn  be  a  sequence  of  pure  chains  with  Wj  = 
Vn  U  U\  ,W2  =  Vi  U  U2,  ■  . Wn  =  Vn-\  U  Un  and  W\ , . . . ,  Wn  £  C.  Suppose  that  if 
A  €  Ci  U  {£/,-,  Vi)  and  Y  €  C}  U  {IT,-,  V,}  for  i  /  ;,  then  A  fl  Y  =  0.  Then 


Wy  -  Cl  -  W2  -  . . .  -  Wn  -  Cn  -  Wx 


is  a  maze.  If  C  €  C,  for  some  i  <  n,  then  we  say  that  C  is  inside  the  maze. 

Remark  2.  Let  £  be  a  loop  with  exit  Z  and  let  C  be  a  pure  chain  starting 
with  Z.  If  C  fl  £  ^  {Z}  then  there  must  be  a  cycle. 

Indeed,  suppose 

£  :  ZA  —  ...  —  c  Ud  —  —  —  a  Y 

and 

C  :a  Yb  —  •••  —  e  U  —  ...  —  Y. 

Now  either 

eUd  -  •••  -a  Yb  -  ...  —e  U  or  eUc  -  -a  Yb  -  ■■■ -e  U 

or  both  are  cycles,  depending  on  whether  E  =  C,  E  —  D  or  C  ^  E  ^  D,  respec¬ 
tively.  ■ 

8.5.  Basic  Properties  of  Abstract  Chains. 

A  strict  partial  ordering  of  formulas  is  defined,  using  the  notion  of  loop.  A 
method  is  provided  that  under  certain  conditions  yields  a  formula  lying  outside  all 
loops  and  mazes. 

Lemma  1.  Suppose  no  chain  is  a  cycle.  Then  is  a  strict  partial  ordering. 

Proof.  To  show  that  A  >•  Y  and  Y  Z  implies  A  >>  Z,  we  need  only  to  show 
that  for  ail  U ,  V,  W,  U  V  and  V  W  implies  U  H > 1  W.  Indeed,  assume 
A  >  Y  and  Y  Z.  Then  certainly  A  Z.  Moreover,  given  Y  Z,  if  Z  A, 
then  Y  ^  A,  a  contradiction. 
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Assume  there  axe  loops  C\,  £2  and  pure  chains  £1,  £2 

£1  :  UA-X,-...-X-...-Xn-AU 

£1 :  AUB-u1~u2-...-ut-Er 

£2  :  Vb  -  -  ...  —  p  Yc  -  ...  -  X'm  -C  v 

£2  :  cVD  -V,-V2-...-Z 

Clearly,  either  eYg  or  eYf  or  both,  depending  on  whether  E  =  F,  E  =  G  or 
F  ^  E  ^  G,  say  the  latter. 

Then  we  claim  that 

Ub  -  ■■■  —  e  Yg  -  — c  Vb  -  ...  -  Z 

is  a  pure  chain.  Since  there  axe  no  cycles,  £2  Pi  £2  =  {V},  by  Remark  2.  On  the 
other  hand,  if  Uq  €  £1  0  £2,  then  either  we  have  a  cycle 

hUol-...-Y-...-V-...-hU0 

cr 

Vb  —  ...  ~h  Uoi  —  ...  —  U  —  ...  —  X 
is  a  pure  chain  and  Y  X,  against  the  hypothesis.  ■ 

Lemma  2.  Lei  (V,E)  be  a  graph  with  sets  F  and  C  as  above  satisfying  the  relevance 
condition  on  conjunctions.  If  there  is  no  infinite  pure  chain  and  no  cycle,  then  the 
there  is  an  element  Xo  minimal  with  respect  to  and  lying  outside  all  mazes. 

Proof.  If  C  is  empty  or  no  edge  has  a  vertex  in  some  C  €  C,  then  any  F  £  F 
is  minimal  with  respect  to  >  and  there  is  no  maze.  Assume  that  some  edge  has  a 
vertex  in  some  C  €  C.  If  X  is  a  terminal  element  of  a  chain,  then  A'  is  minimal 
with  respect  to  and  lies  outside  all  mazes. 

Assume  that  no  chain  has  a  terminal  element.  Since  the  relevance  condition 
on  conjunctions  holds,  there  is  an  infinite  chain  £.  Since  no  infinite  chain  is  pure 
and  there  is  no  cycle,  £  has  the  form 


...-Wd-C0-dW-... 
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for  some  nonempty  Cq.  If  X  €  Co  then  A'  W .  It  is  immediate  to  see  that  if  C\ 

is  another  loop 


C\  :  Zg  —  •••—£■  Wf  —  ...  —g  Z 

with  W  €  C\  and  X  dominates  C\ ,  then  A'  and  W  belong  to  a  cycle 

dWe  — . . .  — Z  — . . .  — X  — . . .  — dWe  or  d  Wf  —  ■  ■■  —  Z  — ...  —  A  —  ...—d  WV- 

Hence  X  W  and  is  nonempty.  If  there  was  an  infinite  descending  sequence 
with  respect  to  ^>,  then  by  Lemma  1  we  would  also  have  an  infinite  pure  chain,  a 
contradiction.  Thus  is  well-founded. 

Notice  that  in  this  case  there  are  configurations  of  the  form 

C\  —Di  W\  —C  —  W2  d2~C2  (*) 

where  D\  is  the  exit  of  C\ ,  D2  the  exit  of  C2  and  both  Wj  and  W2  are  minimal  with 
respect  to  Indeed  if  one  of  W\  and  W2,  say  W2,  is  not  minimal  with  respect 
to  >«,  then  there  is  a  loop  C  and  a  pure  chain  connecting  W2  with  the  exit  Z  of 
C .  Z  cannot  belong  to  £j,  otherwise  there  would  be  a  cycle.  If  Z  is  in  C,  then  we 
consider  the  configuration 


C,-DxW,-...-Z-C\ 

where  the  dots  indicate  a  subchain  of  C.  If  Z  is  not  in  C,  then  C  can  be  extended  to 
a  longer  pure  chain.  Since  there  is  no  infinite  pure  chain,  we  eventually  find  a  loop 
C"  such  that 

Cl  ~ D\  Wi -C-...-C" 

is  also  of  the  form  (*).  By  repeating  the  argument  we  eventually  find  the  desired 
configuration. 

To  find  an  element  A'o  lying  is  outside  all  mazes,  we  consider  a  configuration 
of  the  form  (*)  which  is  maximal,  in  the  sense  that  we  cannot  find 

C'l-Ei  Zi  -C'  -  Z2  El-C2 

such  that  C  extends  C  and  moreover  Z 3  and  Z2  axe  minimal  with  respect  to  >. 
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We  claim  that  for  if  the  chain  (*)  has  the  property  that  C  is  maximal  in  the 
sense  of  the  last  paragraph,  then  one  of  the  formula  occurrences  W\,  W2  is  outside 
all  mazes.  Suppose  W2  is  inside  a  maze:  there  must  be  a  pure  chain  C+  starting 
from  some  X  €  £2  which  reaches  neither  £j  nor  C  —  in  the  first  case  we  would 
have  a  cycle  and  in  the  second  W2  would  not  be  minimal  with  respect  to  >.  The 
assumption  of  this  case  is  that  there  is  no  terminal  element,  therefore  by  the  argu¬ 
ment  in  the  previous  paragraph  we  must  have  X  -  Cpo  -  £0 ,  where  the  loop  £0 
has  exit  D0  minimal  with  respect  to  >.  We  conclude  that  C  can  be  extended  and 
contradict  the  assumption  that  the  original  configuration  (*)  is  maximal.  ■ 

8.6.  Partition  Properties. 

For  the  abstract  graphs  under  consideration  the  notion  RLV(A')  is  defined. 
The  intended  interpretation  is  the  set  of  formulas  deductively  relevant  to  the  formula 
X  in  a  proof-structure.  Conditions  are  provided  under  which  a  partitioning  of  X 
into  A'i  and  A'2  determines  a  partition  of  the  entire  graph  into  RLV(A!)  and 
RLV(A2). 

Let  the  graph  (V,  E)  and  the  sets  F,  C  be  as  above.  For  any  subset  A  of  F, 
we  write  (V  ||  for 

{u  €  V  :  for  all  F  in  F,  v  $  F,  and  for  some  Y  in  y,  v  ||  Y.} 

For  any  X  £  C  we  let 

Ch(A)  =  the  union  of  all  pure  chains  C  -  X  in  (V,E)  with  F,  C, 

that  start  with  X\ 

CH(A)  =  the  union  of  all  chains  C  —  A  in  (V,E)  with  F,  C, 

that  start  with  A; 

4>(A')=Ch(A)u(V  ||  Ch(A))}; 

*(X)  =CH(X)  U  (V  ||  CH(A))}; 

RLV(A’)  ={F  GFuVT’eZorF  C  Z  or  Y  \\  Z,  for  some  Z  €  CH(A')}. 
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Let  F'  and  C'  be  obtained  by  removing  A'o  from  F  and  C  and  suppose  A\  and  Ai 
are  the  only  conjuncts  of  A'o.  For  i  =  1,2  let  In  other  words, 

Ch(j4i)  =  the  union  of  all  pure  chains  C  —  .4,  in  (V,  E)  with  F',  C', 

that  start  with  A”; 

CH(j4,)  =  the  union  of  all  chains  C  —  A,  in  (V,E)  with  F',  C', 

that  start  with  A; 

<f>(At)  =Ch(A,)  U  (V  ||  Ch(A,)) 

<P(A,)=CH(A,)U(V  ||  CH (Ai)) 

RLV(Ai)  =  {Y  €  F'  :  Y  C  Z  or  Y  ||  Z,for  some  Z  €  CH(A,)} 

We  are  interested  in  situations  in  which  given  a  partition  Ao  =  Ai  U  Ai, 

RLV(A)  =  RLV^j )  U  RLV(A2)  U  {A} 

is  a  partition.  We  will  need  only  the  case  when  the  maximal  sets  in  F  are  ail 
elements  of  C,  in  which  case  it  will  be  enough  to  show  that 

*(A)  =  $(.4i)U$(.42)U  {Ao} 

or  that 

<f>(X)  =  <f,(Ai)U<f>(A2)U{X0} 

is  a  partition. 

Lemma  3.  Given  (V,E)  with  F  and  C  as  before,  satisfying  the  relevance  condition 
on  conjunctions,  suppose  that 

(1)  there  is  no  cycle, 

(2)  the  maximal  sets  in  F  are  all  elements  of  C, 

(3)  no  element  of  C  is  terminal  for  any  chain, 

(4)  A’o  €  C  is  minimal  with  respect  to  and  outside  all  mazes. 

Let  Ao  —  A\  U  Ai  be  a  partition.  Then 

(i)  if  E  minimal  relatively  to  C,  then  for  all  A  €  F  U  V,  with  X  ^  A'o, 

A  ||  Y ,  for  some  Y  in  <f>(A,),  implies  X  €  Z  or  A'  C  Z ,  for  some  Z  in  d>(At),  (if) 
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and  RLV(Ao)  =  RLV(Ai  )  U  RLV(A2)  U  {Ao}  is  a  partition. 

(ii)  if  no  infinite  chain  is  pure ,  then  for  all  A  €  F  U  V,  with  X  ^  Xq, 

X  ||  y,  for  some  Y  in  4>(A,),  implies  X  €  Z  or  A'  C  Z,  for  some  Z  in  3>(A,),  (§) 

and  RLV(A'o)  =  RLV(.4i)  U  RLV(A2)  U  {A"o}  is  a  partition. 

Proof.  Let  A0  =  A\  U  A2  be  a  partition. 

(i)  To  prove  (^[),  let  A'  ||  Y ,  with  Y  6  <t>(A,). 

If  X  €  V,  then  by  definition  X  6  (V  ||  Ch(A,)). 

Suppose  X  €  C  and  not  X  =  Ax. 

Let  F  be  Ai.  By  (3),  there  is  a  pure  chain  ...  —  X  —  At. 

Let  y  6  Ch(A,),  say  i  =  1,  A\  —  . . .  —  b  Y  and  Ye  —  A.  If  E  is  a  conjunct  of  Y 
different  from  B,  then  clearly  Ai  —  ...  —  b  Ye  —  X  and  we  are  done. 

Therefore  let  E  =  B.  We  must  show  that  there  exists  another  pure  chain  Yb  —  A  — 
. . .  —  A\ .  Suppose  not.  Notice  that  there  cannot  be  a  pure  chain  in  Ch(A2)  of  the 
form  Yb  —  X  —  ...  —  A2,  since  this  together  with  A\  —  ...  —gY  implies  Ar0  »  Y. 
Therefore  X  £  Ch(A0). 

Consider  any  C  €  Ch(A)nCh(Ao).  Fore  any  pair  of  pure  chains  X  —  . . .  —  v,  C 
and  Xo  —  . . .  —  v2  C  we  cannot  have  ViCV2,  for  any  Vj,  Vy  Let  E'  be  the  result  of 
removing  all  edges  occurring  in  Ch(A).  It  follows  that  the  relevance  condition  on 
conjunctions  is  still  satisfied  in  (V,  E')  with  F  and  C,  contradicting  the  minimality 
of  (V,E).  (Compare  the  previous  paragraph  with  the  (=4>)  part  in  the  proof  of  the 
Multiplicative  Disjunction  Lemma,  section  5.3). 

It  follows  from  (f)  that  Ch(A’)  =  CH(A)  and  Ch(A,)  =  CH(A,),  by  in¬ 
duction  on  the  length  of  any  C  €  CH(A’)[€  CH(A,)].  Therefore,  to  show  that 
RLV(Ao)  =  RLV(Ai)  U  RLV(A2)  U  {A0}  is  a  partition,  it  is  enough  to  show  that 

<£(Ao)  =  4>{A\ )  U  <^(A2)  U  { A'o } 

is  a  partition,  by  (2)  and  (^|).  Since  Ao  —  A\  U  A2  is  a  partition,  it  is  immediate  that 
<(>( Xq)  C  <j>{A\ )  U  <£(A2)  U  {A0},  thus  we  need  to  show  only  that  <f>(A] )  U  <f>(  A2)  =  0. 
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Since  an  element  of  (V  ||  Ch(Ao))  cannot  have  two  distinct  connections,  we  need 
to  show  only  that  Ch(Ai )  fl  Ch(A2)  =  0. 

Suppose  A'o^!  —C'—dY  and  Ye—  C"  ~a7  Xo  are  pure  chains.  If  dYe,  then 
there  is  a  cycle,  contradicting  assumption  (1).  Otherwise  Ao  Y ,  contradicting 
assumption  (4). 

(ii)  To  prove  (§),  let  X  ||  V,  Y  €  $(A,). 

If  AT  €  V,  then  by  definition  A  €  (V  ||  CH(A,)). 

Suppose  A  €  C  and  not  A  =  A,. 

Let  Y  be  A,.  By  (3),  there  is  a  chain  ...  —  A  —  A,. 

Let  Y  €  CH(A,),  say  A,  —  ...  —  b  Y  and  Ye  —  A.  If  E  is  a  conjunct  of  Y  different 
from  B ,  then  clearly  A,  —  ...  —  b  Ye  —  X  and  we  are  done. 

Therefore  let  E  =  B.  By  (3),  there  is  a  chain  Co 

Co  =  X  -bYd-C  .... 

If  Co  terminates,  it  terminates  in  A,  and  we  are  done.  Otherwise,  there  is  a  first 
Z  such  that  X  —b  Ye>  -  ■■■  —  Z  —  ...  —  Z,  since  there  is  no  infinite  pure  chain,  and 
Z  —  ...  —  Z  must  be  a  loop,  by  (1).  Therefore 

A  —  b  Yd  —  C' ...  —f  Zc  —  —  g  Zf  —  •■■C  —d  Yb  —  ...  —  A,. 

Therefore  A  €  CH( Ai). 

To  verify  that  RLV(Ao)  =  RLV(Ai)URLV(A2)U  {A},  is  a  partition  we  need 
to  prove  only  that 

^(Ao)  =  $(A1)U$(A2)U{Ao) 

is  a  partition,  by  (2)  and  (§).  Since  Ao  =  A\  U  A2  is  a  partition,  it  is  immediate  that 
3>(Ao)  C  $(Ai  )U#(A2  )U{Ao},  thus  we  need  to  show  only  that  $>(Ai  )U4>(A2)  =  0. 
Since  an  element  of  (V  ||  CH(Ao))  cannot  have  two  distinct  connections,  we  need 
to  show  only  that  CH(Ai)  (1  CH(A2)  =  0. 

Suppose  not.  As  shown  in  part  (i),  Ch(Ai)  0  Ch(A2)  ^  0  contradicts  (1)  or 
(4).  Therefore  we  may  suppose  Ao/t,  —  C  —a7  Xq  is  a  (non-pure)  chain,  say 
C  : 

XoAl-C0-W1-Ci-Wl-Ci-W2-...-Wm-1-Cm-i-Wn-£n-Wn-Cm-AtXo 
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where  Co, . . .  ,Cm  are  pure  chains  and  we  may  assume  that  for  ail  i  ^  j  with  0  < 
i,j  <  mi  and  for  all  C'  (E  C{ ,  C"  €  C_,,  we  have  C1  C"  and  C"  C'  (otherwise, 
we  can  take  a  chain  shorter  than  C.)  Then  by  removing  ,Cm  we  obtain  a 

maze  containing  A'o  and  this  contradicts  assumption  (4).  ■ 

8.7.  From  Proofs  to  Chains. 

Structure  Theorem  Let  T  be  a  sequent  in  Cd  ■  Let  V  be  a  derivation  of  h  T  in 
DL  [or  in  DL+],  If  V  is  a  list  of  all  P, ->P  such  that  h  P,  —<P  or  b  ->P,  P  is  an 
axiom  of  T>,  then  V  is  a  pervasive  path  for  T  [or  a  minimal  path  for  T]  and  there  is 
no  conjunctive  cycle. 

Proof.  Case  of  LD.  We  argue  by  induction  on  the  length  of  V.  We  call  the  set  of 
all  P,  ->P  such  that  (-  P,  ->P  is  an  axiom  of  V  the  path  induced  by  T>.  If  T>  ends  with 
an  axiom  there  is  nothing  to  prove.  Let  V,  be  the  last  inference  of  V. 

If  7 Z  is  the  V-rule,  the  path  induced  by  V  is  the  same  as  the  one  induced  by  the 
immediate  subderivation  and  the  result  is  immediate  from  the  induction  hypothesis. 

If  TZ  is  a  Mingle  or  the  A-rule,  let  V\  and  V2  be  the  premises  Ti  and  T2  ol 
TZ.  We  may  assume  that  the  structures  Si  =  (ri,Pi)  and  S2  =  (r2,P2)  share 
no  formula  occurrence.  The  path  V  is  the  union  of  the  paths  Pj  and  P2-  It  is 
immediate  to  verify  that  V  satisfies  conditions  (a)  —  ( d )  in  the  definition  of  section 
(8.2),  i.e.,  that  it  is  a  path  for  T,  Also  V  is  pervasive  because  V\  and  P2  are. 

The  fact  that  there  is  no  conjunctive  cycle  is  immediate  from  the  induction 
hypothesis  in  the  case  of  Mingle.  In  the  case  of  the  A-rule,  to  check  that  there  is  no 
conjunctive  cycle  of  length  1  it  is  enough  to  note  that  V\  and  P2  are  disjoint.  For 
cycles  of  length  greater  than  1,  note  that  by  induction  hypothesis  a  cycle  cannot 
occur  only  inside  or  T^.  Thus  we  need  to  consider  only  conjunctive  chains 
containing  A  A  B,  say 

C  :f  Xc  —  •••  —  d  A  A  Be  —  •••  —  f  X 

Notice  that  A  A  B  is  the  only  conjunction  such  that  one  conjunct  belongs  to 
and  the  other  to  T^,  thus  every  chain  containing  conjunctive  subformulas  of  both 
and  must  contain  A  A  B.  Let 


Ci  :  Xc  -  Yn  -  . . .  -  Yx  -d  A  A  B 
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and 

C2  :  A  A  Be  —  Zj  —  ...  —  Zm  —  f  X 

be  chains  such  that  Yn  —  . . .  —  A  A  B  and  A  A  B  —  ...  —  Zm  are  pure  (i.e,  without 
repetition).  By  induction  on  i  and  on  j  we  prove  that  all  Yx  belong  to  and  all  Z3 
belong  to  T^.  Now  X  cannot  belong  both  to  and  to  F^,  thus  we  conclude  that 
X  is  Af\B  and  that  C  X  A  and  F  -<  B.  Furthermore,  neither  Ac  —  Yn  —  . .  .-Yi-pA 
nor  Be  —  Z\  —  ...  —  Zm  —fB  can  be  a  cycle,  by  induction  hypothesis.  Finally,  C 
is  not  a  cycle,  since  it  contains  repetition.  —  Notice  that  C\  and  C2  are  loops. 

We  now  turn  to  the  case  of  DL+.  We  need  a  preparatory  result.  The  following 
tedious  proposition  is  a  restatement  of  a  well  known  result  for  classical  sequent 
calculus. 

Proposition.  Every  derivation  T>  of  T  in  DL+  can  be  transformed  into  a  deriva¬ 
tion  V  of  h  r  in  DL+  such  that  for  every  application  7 Zw  of  Weakening  either  7lw 
introduces  an  active  premise  of  the  M-rule  and  the  other  premise  has  some  ances¬ 
tor  in  an  axiom  of  V  or  TZvv  introduces  a  formula  of  T  and  there  are  no  logical 
rules  below  7 Zw-  In  particular,  V  has  the  property  that  every  active  formula  in  an 
application  of  the  A -rule  has  some  ancestor  in  an  axiom  (relevance  condition  on 
conjunctions). 

Proof.  By  induction  on  the  length  of  V.  Let  71  be  the  last  inference  of  V.  By 
induction  hypothesis  the  result  can  be  applied  to  immediate  subderivation[s]  ending 
with  the  premise[s]  of  71]  let  T>\  [and  V 2]  be  the  resulting  derivation[sj.  Let  7R,\  [and 
7^]  be  the  lowermost  inference  of  V\  [of  T>t\  different  from  a  Weakening. 

Let  TZ  be  the  A-rule  with  conclusion  A  A  B.  Suppose  A  is  introduced  by  an 
application  Hw  of  Weakening,  and  we  assume  by  induction  hypothesis  that  71  w 
occurs  below  7£j.  We  replace  A  A  B  for  A  as  the  conclusion  of  TZw,  we  omit  V2 
and  for  every  side  formula  C  in  the  endsequent  of  V2,  we  introduce  C  by  a  new 
Weakening.  Suppose  neither  A  nor  B  are  introduced  by  a  Weakening.  We  obtain 
a  derivation  V  with  the  required  property  by  permuting  71  with  all  Weakenings 
occurring  below  7l\  and  7Z'2  ■ 

Let  71  be  the  V-rule  with  conclusion  AW  B  and  let  7Z'V,  71"  be  the  inferences 
introducing  A  and  B  \nT>\.  If  7l'v,  71"  are  both  Weakenings,  then  we  replace  AM  B 
for  A  els  the  conclusion  of  72.'v  and  omit  7£" .  If  one  of  7£'v,  71" ,  say  7v'v,  is  a  logical 
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rule  and  the  other  is  a  Weakening,  then  by  induction  hypothesis  7Z'V  does  not  occur 
below  7l\ .  We  obtain  a  derivation  T>'  with  the  required  property  by  permuting  first 
7 Z"  and  then  71  with  the  other  Weakenings  occurring  below  7t\ .  If  both  7Z'V  and 
71 ”  are  logical  rules,  as  before  we  permute  71  with  all  the  Weakenings  below  7Z[.  ■ 

Proof  of  the  Theorem,  Case  of  LD+.  We  assume  that  the  derivation  V 
satisfies  the  above  proposition.  Therefore  P  -  namely  the  list  of  all  P,  ->P  such 
that  b  P,  ->P  or  b  ->P,  P  is  an  axiom  of  V  -  satisfies  the  relevance  condition  on 
conjunctions.  The  other  conditions  in  the  definition  of  path  (section  8.2)  are  easily 
verified  as  before,  thus  V  is  a  path  for  T. 

In  addition,  we  must  prove  that  the  path  is  minimal.  Let  b  T  be  b  A,  II,  where 

V  •/*  II.  By  the  above  proposition,  Weakening  in  V  is  used  only  either  to  introduce 
a  formula  occurring  in  II  or  a  subformula  B  of  a  disjunction  Ay  B  or  By  A,  where 

V  A.  We  may  assume  II  is  empty,  otherwise  we  consider  the  subderivation  ending 
with  the  conclusion  of  the  lowermost  logical  rule.  Now  we  replace  the  derivation  T> 
of  b  A  with  a  derivation  V  of  b  A*  in  MLL  with  the  Plus  rule  defined  as  follows. 
For  the  subformula  occurring  in  A  define  the  translation  £  by 

P‘  =  P; 

(_P)/  =  pi. 

(A  A  BY  =  A1  ® 

( A  V  BY  =  A1  n  Bl ,  if  P  i -*  A  and  V  •— *  B\ 

(. A  V  BY  =  A1  ®  B(  otherwise. 

T)'  is  then  inductively  obtained  from  P.  by  omitting  all  Weakenings  and  re¬ 
placing  occurrences  of  the  A-rule  by  the  Times  rule  and  occurrences  of  the  V-rule 
with  Par  or  Plus  rule,  as  needed.  By  the  Structure  Theorem  for  this  fragment  (see 
section  4)  there  is  a  proof-structure  S'(A*)  satisfying  the  vicious  circle  and  connect¬ 
edness  conditions.  By  the  proposition  in  section  (5.2)  there  is  no  cycle  in  S'  and 
by  the  Multiplicative  Disjunction  Lemma  (section  5.3)  from  the  set  of  axiom  links 
P',(-P)'  we  obtain  a  minimal  path  V  for  b  A.  But  P(  =  P  and  ( ->PY  =  P-1, 
thus  the  axioms  of  V  are  the  same  as  the  axioms  of  X>,  after  replacing  ->P  by  Px. 
It  is  therefore  easy  to  see  that  P  is  a  minimal  path  for  T  and  that  (T^,P)  contains 
no  cycle.  ■ 
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8.8.  From  Chains  to  Proofs. 

Sequentialization  Theorem  (ii)  Let  T  be  a  sequent  in  Cz-  ,f  'r>  a  pervasive 
[• minimal\  path  for  T  and  there  is  no  conjunctive  cycle,  then  we  can  construct  r 
derivation  V  of  h  F  in  DL  [in  DL  +  ], 

Proof.(Case  of  LD  .)  We  have  T-'  and  a  pervasive  V  satbiymg  the  conditions.  The 
proof  is  by  induction  on  the  sum  of  the  logical  complexity  of  all  formulas  in  T,  plus 
the  number  of  atoms  in  T  which  do  not  occur  in  V. 

Case  0.  If  F  =  P,  ->P,  then  V  must  be  P,  ~'P  and  there  is  nothing  to  prove. 

If  there  is  a  subset  V\  of  V  and  a  subsequent  A  of  T  such  that  V\  is  a  pervasive  path 
for  A,  then  it  must  be  the  case  that  T  =  A,  A,  V  =  V\  UV?  where  V2  is  a  pervasive 
path  for  A,  since  V  is  a  pervasive  path  for  T.  In  this  case  the  result  follows  from 
the  induction  hypothesis  by  an  application  of  Mingle. 

Case  1.  A  disjunction  occurs  in  T. 

If  T  =  A,  A  V  B  then  the  result  is  immediate  from  the  induction  hypothesis  applied 
to  A ,A,B  and  V,  using  the  V-rule. 

Case  2.  No  formula  in  T  is  a  disjunction  and  in  some  chain  there  is  a  terminal 
conjunction  A\  A  A?. 

Subcase  (a).  T  =  A,  A\  A  Ai  and  for  every  P,  ->P  E  V,  if  P  -<  A,,  then  also  ->P  -<  A ,, 
say  i  =  2.  Let  V\  be  the  restriction  of  V  to  A,  A\  and  V2  the  restriction  of  V  to  Ai- 
Clearly  V2  is  a  pervasive  path  for  A2,  thus  V\  is  a  pervasive  path  for  A,Aj,  there 
are  no  cycles  and  the  result  follows  from  the  induction  hypothesis  by  an  application 
of  the  A-rule. 

Subcase  (b).  T  =  A,  A\  A  .A2,  II,  where  for  some  i,  II  =  {P  :  P  is  an  atom  and  P  || 
A\ }  and  II  and  A ,  have  the  following  property: 

for  every  X ,  if  A,  ||  X ,  then  X  €  II. 

Say  i  =  2.  This  is  handled  as  Subcase  (a),  by  letting  V\  be  the  restriction  of  V  to 
A,  A\  and  V2  the  restriction  of  V  to  ^2,11. 

Case  S.  none  of  the  above. 

Let  T  =  E,  II,  where  E  are  all  the  conjunctions  and  II  all  the  atoms  and  negations  of 
atoms.  Let  (V,E)  with  F  and  C  be  interpreted  as  in  the  Remark  1  in  section  (8.4). 
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Notice  that,  since  T  is  finite,  there  cannot  be  any  infinite  chain  without  repetition. 
Since  by  assumption  there  is  no  conjunctive  cycle,  we  may  apply  the  Lemma  2  in 
Section  (8.5)  to  find  an  element  A'o  =  A\  A  A2  minimal  with  respect  to  >>  and  lying 
outside  till  mazes.  Conditions  (1)  —  (4)  of  Lemma  3  in  section  (8.6)  are  satisfied, 
thus  by  part  (ii)  of  that  lemma  there  is  a  partition 

RLV(A'o)  =  RLV(J41 )  U  RLV(A2)  U  {X0}. 

We  claim  that  RLV(Ao)  =  T.  Suppose  not.  Since  no  formula  in  T  is  a  disjunction, 
we  can  find  A,  A  such  that  T  =  A,  A  and  RLV (Ao)  =  A  and  V  =  V\  U  V2,  where 
V\ ,  V2  are  the  restrictions  of  V  to  A,  A,  respectively.  Thus  we  are  back  to  Case  0. 

Therefore  RLV(A0)  =  T.  Ifwe  let 

Vi  =  eV-.PjZ  A  Pj-J  €  RLV(A,),  for  >  =  0,1} 

it  is  easy  to  show  that  V,  is  a  pervasive  path  for  for  i  =  1,2.  In  particular,  the 
relevance  condition  on  conjunctions  is  satisfied  since  each  set  RLV(A,)  is  closed 
under  ||. 

The  proof  for  DL+  is  similar.  Since  V  is  minimal,  it  cannot  happen  that 
T  =  A,  A,  V  =  V\  U  V2,  V\  is  a  path  for  A  and  P2  is  a  path  for  A.  Instead,  it  may 
happen  that  T  =  A,  A  and  V  A.  This  case  is  easily  handled  using  Weakening. 
Finally,  in  case  3  we  use  part  (i)  of  the  Lemma  3  in  section  (8.6).  ■ 

Remark.  By  the  translation  ■£,  the  sequentialization  theorem  is  also  a  consequence 
of  the  sequentialization  theorem  for  propositional  MLL  plus  the  Plus  rule.  The 
proof  above  is  giveen  in  order  to  make  a  comparison  between  the  representation  of 
proofs  by  proof  structures  and  empires  and  the  representation  by  chains  and  cycles. 

9.  Conclusion. 

We  have  modified  Girard’s  definition  of  Proof-Structures  for  Linear  Logic  with¬ 
out  exponentials  (section  3),  and  provided  a  new  characterization  of  Proof-Nets 
(section  3.5)  based  on  the  notion  of  empire  of  a  formula-occurrence  —  the  set  of 
formula-occurrences  deductively  relevant  to  the  formula-  occurrence  in  question. 
The  notion  of  empire  (section  3.4)  has  been  inductively  defined  as  primitive  for 
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both  the  multiplicative  and  the  additive  fragment.  Searches  through  an  empire 
are  formalized  as  trees  (section  4.1),  instances  of  a  well-known  notion  of  inductive 
search.  The  new  conditions  have  been  proved  necessary  and  sufficient  for  provability 
in  Sequent  Calculus  for  Linear  Logic  without  exponentials  (section  4). 

A  second  equivalent  characterization  of  Proof-Nets  for  the  Multiplicative  frag¬ 
ment  has  been  obtained  by  correcting  and  modifying  a  condition  first  considered 
by  Ketonen  and  Weyhrauch  for  Direct  Logic,  in  which  a  set  of  possible  axioms  is 
regarded  a  path  though  the  conclusion  and  chains  of  conjunctive  formulas  are  tested 
to  guarantee  deductive  adequacy  (section  5). 

Another  representation  of  derivability  in  the  Multiplicative  and  Additive  frag¬ 
ment  is  provided,  through  the  notion  of  decomposition  of  Proof-Structures  into 
Families  of  Quasi-Structures.  In  such  an  approach,  the  multiplicative  links  uniquely 
determine  the  deductive  structure  within  each  Quasi-Structure,  while  additive  links 
determine  the  connections  between  different  elements  of  a  Family  (section  6). 

Cut-Elimination  is  studied  using  Families  of  Quasi-Structures  as  representa¬ 
tion  of  derivations.  The  Strong  Normalization  Theorem  yields  here  uniqueness  of 
the  normal  form,  in  the  sense  that  normal  derivations  obtained  trhough  different 
sequences  of  reductions  are  mapped  to  the  same  set  of  quasi-structures  (section  7.3). 

We  have  obtained  a  generalization  of  the  previous  results  to  Direct  Logic  with 
Mingle.  Abstract  graph-theoretic  properties  of  Ketonen  and  Weyhrauch’s  represen¬ 
tation  are  exploited  to  prove  it  adequate  and  correct  (section  8). 


PART  II 


144 


Section  10 


10.  Proof  Theoretic  Tools. 

In  this  section  we  review  some  classical  proof-theoretic  results,  Eerbrand’s  The¬ 
orem,  and  Kreisel’s  No  Counterexample  Interpretation  (NCI).  The  proofs  are  well- 
known.  Next  we  consider  Herbrand’s  theorem  in  the  context  of  Linear  and  Direct 
Logic  and  a  restriction  of  the  NCI  to  a  fragment  of  Peano  Arithmetic. 

Definitions.  Let  £  be  a  first  order  language. 

(i)  Let  us  say  that  a  formula  A  is  in  IIi  form  [II2  form]  if  it  is  of  the  form 

/\zi . /\xn.B,  [/\  x\  . . .  f\  xn.  V  V\  ■  ■  ■  V  Vm-B]  where  B  is  quantifier  free  and 

n,m  >  0. 

(ii)  A  quantifier  and  its  bound  variable  are  essentially  universal  if  they  are  uni¬ 
versal  in  a  positive  context  or  existential  in  a  negative  context;  otherwise,  they  are 
essentially  existential. 

Let  F  be  a  sequence  of  closed  formulas  of  £,  and  let  Qx\,. . .  ,Qxn  axe  all 
the  distinct  essentially  existential  quantifiers  and  Qyx , . . . ,  Qym  are  all  the  distinct 
essentially  universal  quantifiers  of  I\  We  say  that  x\ , . . . ,  xn  are  all  the  distinct 
essentially  existential  variables  and  yi , . . . ,  ym  all  the  distinct  essentially  universal 
variables  of  I\  (Of  course,  each  variable  in  each  list  may  have  several  occurrences  in 
T.)  For  i  <  m,  let  Qyi.B,  be  the  scope  of  the  quantifier  Qyi  and  let  Qxij , . . . ,  Qx 
be  all  the  existential  quantifiers  containing  Qyi.B,  in  their  scope. 

(iii)  The  expression  yjaqp, . . .  is  called  the  Herbrand’s  function  associated 

with  y,. 

Let  £'  be  the  language  £  extended  with  the  Herbrand  functions  for  I\  We  will 
use  the  boldface  letter  “y”  for  the  Herbrand  function  as  a  formal  symbol  of  the 
extended  language  £',  where  y  is  associated  with  an  essentially  universal  quantifier 
Vy. 

(iv)  The  Herbrand’s  form  T h  of  T  is  the  result  of  replacing  all  essentially  univer¬ 
sal  variables  of  T  with  their  Herbrand  function  and  of  deleting  the  corresponding 
quantifiers.  If  t  =  t],...,tn  is  a  list  of  terms  then  T#  is  the  result  of  replacing 
t  for  the  essentially  existential  variables  x  =  xj , . . . ,  xrt  of  T h  and  of  deleting  the 
corresponding  quantifiers. 
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Paty  (ii)  of  the  following  proposition,  together  with  the  Cut-Elimination  The¬ 
orem  for  Predicate  Calculus,  yields  Eerbrand’s  Theorem. 

Proposition,  (i)  Let  T  be  a  set  of  IlJ  sentences  and  let  xp  be  a  quantifier -free 
formula  of  £.  If  T  h  Vx.3y.t/>(x,  y)  is  provable  in  LK  without  Cut,  and  a  is  a 
parameter  not  used  in  the  derivation,  then  there  are  terms  t\, . . .  ,tn  €  £  such  that 
T  1-  rp(a,  ),...,  ip  (a,  tn)  is  provable  in  LK  without  Cut. 

(ii)  Let  h  T  be  any  sequent  in  C  and  let  £'  be  an  extension  of  £  containing  Herbrand 
functions  for  the  essentially  universal  quantifiers  ofT.  In  £'  there  are  terms  t  and 
a  quantifier-free  sequent  £j-(T)  (the  Herbrand  expansion  of  T)  such  that  I-  T  is 
derivable  in  LK  without  Cut  if  and  only  if  I-  £jr(r)  is.  ■ 

Remark  1.  Herbrand  [1930]  works  with  a  language  £  with  connectives  V,  A 
and  quantifiers  V,  3.  Given  a  formula  A ,  let  T  be  a  list  of  all  constant  and  functions 
occurring  in  A  (if  no  constant  occurs  in  A,  we  take  a  new  one)  together  with  the 
Herbrand  functions  associated  with  essentially  universal  quantifiers  of  A.  Define 
Vp,  the  domain  of  order  p ,  inductively  as  follows.  T>\  is  the  set  of  all  constants 
in  T.  T’n+i  is  the  union  of  Vn  and  of  the  set  of  all  terms  obtained  by  applying 
some  function  in  T  to  the  elements  of  T>n.  Let  T>p  be  {ti,...,tg}.  £ti,...,t,M)i  the 
expansion  of  A  of  order  p,  results  from  A  by  the  following  transformations: 

(1)  replace  all  the  essentially  universal  variables  in  A  with  the  associated  Herbrand 
function  and  delete  the  corresponding  quantifiers.  Let  Ah  be  the  resulting  formula; 

(2)  by  induction  on  the  complexity  of  Ah,  replace  every  subformula  of  the  form 
3x.C  in  positive  occurrence  with  C(ti)  V  ...  V  C( t?)  and  every  subformula  of  the 
form  Vx.C  in  negative  occurrence  with  C^tj)  A  ...  A  C(tg). 

Remark  2.  Herbrand’s  theorem  can  be  proved  as  a  corollary  of  Kleene’s  Per- 
mutability  Theorem  [1952]  ,  which  allows  the  permutation  of  any  two  propositional 
inferences,  provided  that  the  principal  formulas  of  one  inference  is  not  an  ancestor 
of  the  principal  formula  of  the  other. 

In  the  proof  of  the  “ only  if'  part,  given  a  cut-free  derivation  V  of  h  T,  let  p  be 
the  number  of  applications  of  the  3-right  and  V-left  rules  in  V.  We  need  to  obtain 
a  cut  free  derivation  V  of  h  £f(r),  where  £j(r)  is  the  expansion  of  T  of  order  p.  V 
is  easily  obtained  from  V  by  the  following  transformations. 
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(1)  Each  eigenvariable  is  replaced  by  a  suitable  term  of  C  and  every  inference 
introducing  an  essentially  universal  formula  is  omitted. 

(2)  An  application  of  the  3-right  rule  is  replaced  in  V  by  a  sequence  of  applications 
of  the  V-right  rule  and  an  application  of  the  V-left  rule  is  replaced  by  a  sequence  of 
applications  of  the  A-left  rule. 

The  proof  of  the  “  if"  part  can  be  described  as  follows  (Kleene  [1968]  gives 
a  proof  in  the  case  of  sequents  of  prenex  formulas).  Let  X?  be  a  cut-free  derivation 
of  t-  £t-(T)  and  consider  the  list  of  terms  tj , . . . ,  tm  of  the  form 

yi[tl,l,  •  •  •  1  ],  ■  •  •  1  ym  [t  m,l  j  •  •  •  i  tn,fcm  ] 

such  that  for  each  i,  y j  corresponds  to  an  essentially  universal  quantifier  Qij.Ai 
occurring  in  I\  We  need  to  find  a  derivation  V  of  h  £j-(T)  such  that  a  derivation 
V"  of  b  T  can  be  obtained  from  V  by  inserting  suitable  applications  of  the  rules 
for  3  and  V  and  of  Contraction.  In  particular,  V  must  be  such  that  if  for  each  i, 
y<[t<,i , . . .  is  regarded  as  an  eigenvariable  a,,  then  V"  satisfies  the  restrictions 

on  the  eigen  variables. 

To  construct  V  we  assign  a  strict  partial  ordering  to  the  terms  tj , . . .  ,tm,  by 
letting  tj  precede  tj  if  and  only  if  t*  is  a  subterm  of  t}.  Next  we  consider  the 
formula-occurrences  in  T>  that  in  T>"  become  active  in  some  application  of  the  rules 
for  3  and  V.  We  extend  the  ordering  of  the  terms  t*  to  an  ordering  of  such  formula- 
occurrences.  The  ordering  of  formula-occurrences  has  the  additional  property  that 
if  A(t),  B(t)  become  active  in  inferences  whose  principal  formula  are  essentially 
universal,  essentially  existential,  respectively,  then  X?(t)  precedes  A(t). 

Finally,  we  show  that  Kleene’s  Permut ability  Theorem  can  be  applied  to  V  so 
that  if  B( t)  precedes  A(t),  then  in  V  the  lowermost  occurrence  of  B(t)  is  above 
the  lowermost  occurrence  of  A(t). 

Remark  3.  Consider  the  classical  equivalences 


-A/x.B  =  3  x.-^B  ->3  x.B  = 

(Qx.B)  VC  =  Qx.(B  VC)  CM  ( Qx.B )  =  Qx.(C  V  B) 

( Qx.B )  A  C  =  Qx.(B  AC)  C  A  (Qx.B)  =  Qx.(C  A  £), 
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where  C  does  not  contain  x  free.  Given  a  formula  A,  by  replacing  equivalent  subfor¬ 
mulas  according  to  the  above  rules,  we  may  obtain  (1)  formulas  A!  in  prenex  form 
or  (2)  a  formula  A "  in  which  the  quantifiers  have  minimal  scope.  Herbrand  [1930] 
defines  two  kinds  of  expansions  of  A,  obtained  by  applying  certain  transformations 
to  either  A'  or  to  A" ,  respectively. 

In  Case  (1)  the  expansion  of  order  p  has  a  simple  form.  Let  t  =  tj , . . .  ,t9  be 
all  the  terms  in  Vp  and  let  x,,. . .  ,xn  be  all  the  essentially  existential  variables  in 
A.  Then  S^A')  is  A'#1  ^  V  ...  V  A'^r^  where  ai,...,ar  are  all  the  nq  assignments 
of  terms  in  t  for  the  essentially  existential  variables  in  A. 

Case  (2)  is  interesting,  because  here  any  Herbrand  function  y[xi, . . . ,  xm]  has 
minimal  number  of  arguments.  The  well-known  errors  in  Herbrand’s  thesis  (Dreben, 
Andrews  and  Aanderaa  [1963] )  are  related  to  the  claim  that  the  order  p  of  the 
expansion  satisfying  Herbrand’s  Theorem  for  a  formula  A  is  preserved  under  trans¬ 
formation  of  A  by  replacement  of  subformulas  according  to  the  above  equivaler  ces. 
The  difficulty  of  the  corrections  by  Dreben  and  Denton  [1966]  (see  also  Note  E, 
p.571,  in  van  Heijenoort  [1967])  illustrates  how  massive  transformations  in  the 
structure  of  proofs  are  induced  by  transformation  of  formulas  into  prenex  form. 

Remark  4.  If  conditional  terms  if .  .  .then. .  .else.  .  .  can  be  expressed  in  £, 
then  in  part  (i)  of  the  Proposition  above  we  can  take  n  =  1  and  in  part  (it)  there 
axe  terms  t  =  ti,...,t*  £  £'  ( functionals  of  the  predicate  calculus )  such  that  £f(r) 
is  IV 

10.1.  Permutability  of  Inferences  in  Linear  and  Direct  Logic. 

Counterexamples.  (1)  The  following  is  a  derivation  in  MLL~  in  which  the 
applications  of  the  ®-rule  and  of  the  U-rule  cannot  be  permuted. 

hPx,P 

h  P±,P®Q,QL 
I-  Q±.P±,P®Q 


b  Q±HP±,P^Q 
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(2)  The  following  is  a  derivation  in  MALL  in  which  the  applications  of  the  0-rule 
and  of  the  (1-rule  cannot  be  permuted. 

h  PX,P  h  QX.Q 

hPi0Qi,P 

(-  Pi®Qx,Pn(? 

A  full  characterization  of  permutability  of  inference  in  MLL  is  obtained  using  the 
mapping  of  derivations  into  proof-nets  (section  3.7)  and  the  notion  of  empire. 

Fact.  Let  D  he  a  derivation  in  propositional  MLL  and  let  Tii  and  Ti2  be  inferences 
such  that 

(1)  Tii  is  a  ®-rule  with  upper  sequents  Ti  and  T 2; 

(2)  Ti2  a  U -rule  occuring  immediately  below  Ti\; 

(3)  both  active  formulas  .of  Ti2  have  ancestors  only  in  Ti  or  only  in  IV 
Then  Tii  can  be  permuted  with  Ti2.  ■ 

Let  us  say  that  an  inference  Ti  in  a  deduction  introduces  a  formula-occurrence  X 
if  X  is  the  principal  formula  of  Ti. 

Theorem.  Let  V  be  any  derivation  of  b  T  in  propositional  MLL,  and  let  n(V) 
be  the  corresponding  proof-net.  Let  Ti  be  an  inference  in  V  introducing  A  o  B.  By 
permuting  the  inferences  of  V  we  obtain  a  derivation  V  of  h  T,  with  the  property 
that  for  all  C,  if  r(D)  €  e(-K(A)),  then  the  inference  introducing  C  does  not  occur 
below  Ti. 

Proof.  Let  k  be  the  number  of  formula  occurrences  C  such  that  ir(C)  €  e(n(A)) 
and  C  is  introduced  below  Ti  —  the  inference  in  which  A  is  “captured”  by  AoB.  By 
induction  on  e(7r(A))  (see  section  3.4),  we  show  that  we  can  permute  the  inferences 
of  V  so  that  we  reduce  k.  The  cases  of  clauses  (i)  —  (Hi)  in  the  definition  of  empire 
are  trivial. 

Clause  (iv):  rr(X)  €  e(r(A))  and  X  ^  A  implies  7r(A'  ®Y)  €  e(r(A)).  By  induction 
hypothesis  we  may  assume  that  X  is  introduced  above  Ti.  If  Ti'  introduces  X  0  Y 
and  occurs  below  7£,  then  A  is  a  passive  formula  of  every  sequent  between  Ti  and  Ti' . 
If  we  permute  TV  with  the  inference  Ti"  immediately  above  it,  we  do  not  increase 
the  number  of  formulas  in  e(A)  that  are  introduced  below  Ti,  while  the  total  number 
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of  inferences  in  the  derivation  remains  the  same.  After  a  finite  number  of  steps,  the 
inference  introducing  X  ®  Y  is  permuted  above  TZ  and  we  have  reduced  k. 

Clause  (v):  n(X)  €  e(ir(A)),  rr(Y)  €  e(7r (A))  and  X  ^  A  ^  Y  imply  ir(X  U  Y)  € 
e(7r (A)).  By  induction  hypothesis  we  assume  that  both  X  and  Y  are  introduced 
above  TZ.  It  follows  that  for  each  application  7 Z®  of  the  ®-rule  between  1Z  and 
TZ'  both  X  and  Y  have  ancestors  only  in  one  of  the  upper  sequents  of  TZ® .  If 
the  inference  TZ"  immediately  above  TZ'  is  another  U-rule,  then  clearly  TZ'  can  be 
permuted  with  TZ" .  If  TZ"  is  a  ®-rule,  then  by  the  previous  Fact  TZ'  can  be  permuted 
with  TZ" .  ■ 

The  above  result  can  be  extended  to  MALL  and  LD+.  However,  it  is  con¬ 
venient  to  use  proof-nets  directly,  rather  than  the  Sequent  Calculus  and  the  Per- 
mutability  Theorem,  in  the  proof  of  Herbrand’s  theorem  for  MLL  below. 

10.2.  Herbrand’s  Theorem  in  Linear  and  Direct  Logic. 
Counterexamples.  Suppose  x  does  not  occur  in  Q. 

(1)  The  formula  (f\ x.P  ®  Q)  -o  ( f\x.P )  ®  Q  is  not  derivable  in  first  order  Linear 
Logic,  but  its  Herbrand  expansion  P(x)<g>Q  -o  P(x)®Q  is  derivable  in  propositional 
MLL". 

(2)  The  formula  (\f  x.P )  n  Q  -o  (\f  x.P  n  Q)  is  not  derivable  in  first  order  Linear 
Logic,  but  its  Herbrand  expansion  P(x)nQ  — o  P(x)nQ  is  derivable  in  propositional 

MALL. 

For  the  fragment  MLL  —  and  for  the  extension  LD+  —  Herbrand’s  Theorem 
holds  for  prenex  formulas.  Working  in  the  sequent  calculus,  we  consider  sequents 
b  r  where  all  formulas  are  prenex.  If  T  contains  free  variables,  then  the  free  variables 
are  considered  as  universally  quantified,  and  the  Herbrand  function  of  a  free  variable 
z  is  z. 

Herbrand’s  Theorem  for  MLL.  Let  T  be  a  sequence  of  prenex  formulas  of  MLL 
and  let  C  be  an  extension  of  C  containing  Herbrand  functions  for  the  universally 
quantified  variables  of  T.  There  are  terms  t  =  tl7...,tn  €  C  such  that  t~  T 
is  derivable  in  first  order  MLL  without  Cut  if  and  only  if  h  is  derivable  in 
propositional  MLL  without  Cut. 
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Proof.  Consider  a  proof-net  S  with  conclusions  T  =  A\,. . . ,  An  and  without  cuts. 
Consider  the  proof-net  S'  obtained  from  S  els  follows.  Let  /\  yj  ,B\ , . . . ,  A  ym-Bm 
be  a  list  of  all  the  conclusions  of  /\-links  in  iS,  with  associated  eigenvariables 

b  t  ■  •  m  bm  • 

Since  the  ordering  >t  is  strict,  we  may  assume  that  b\ , . . . ,  bm  are  ordered  in  such 
a  way  that  if  6;  >t  bj  then  i  <  j.  Let 

(*)  yi^l.li 

be  a  list  of  the  Herbrand’s  functions  associated  with  /\yi , . . . ,  f\ym ■  Each  xtJ  is 
an  essentially  existential  variable  and  corresponds  to  one  and  only  one  link 

V 

such  that  f\y,.B,  •<  C(titj).  Consider  the  pair  of  lists 

[0]  yi[*l,l>  "M  Wm]; 

The  first  list  is  the  result  of  replacing  each  Xij  with  tl%]  in  (*)  and  will  be  called 
the  list  of  universal  terms.  The  list  of  universal  terms  hcis  the  following  property. 

Fact  1.  If  the  eigenvariable  bi  occurs  in  a  term  y> j,i •>  •••»*>',*>]>  then  bi  >t  bj. 

The  proof  is  by  an  easy  induction  on  the  complexity  of  yj[t>,i,  It  follows 

from  Fact  1  that  6,  occurs  only  in  y>(t>,i, •••>*>,*,•]  with  i  <  j. 

The  second  list  in  [0]  contains  ail  terms  t  such  that 

C(t) 

Vx.C. 


is  a  link  of  5  emd  will  be  called  the  list  of  existential  terms. 

We  proceed  in  steps.  We  staxt  by  replacing y3 <it*,]  for  the  eigenvariable 
&i  throughout  S  and  the  lists  [0].  We  obtain  a  proof-net  and  a  pair  [1]  of  lists. 
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At  the  (*’  4-  l)-th  step  we  replace  the  (i  -f  l)-th  universal  term  in  [t]  for  £>j+1  in  S ^ 
and  in  the  lists  [*],  obtaining  a  proof- net  and  a  pair  of  lists  [i  + 1].  Let  (★)  be 

M  yi[tlt  ti,*,],  — ,  ym  [tm,l  >  •••■>  tm,Am  ]j 

Using  Fact  1  we  can  show  that 

Fact  2.  Let  6j,...,6'm  be  a  permutation  of  bi, . . .  ,bm,  such  that  b\  >t  bt  implies 
i  <  j .  The  terms  occurring  in  the  lists  (★)  do  not  change  if  the  universal  terms  of 
[0]  are  ordered  according  to  b[ , . . . ,  b'm . 

Finally,  we  delete  all  /\-  and  \/-links  in  S ^  and  let  S'  be  the  resulting  proof- 
structure.  Since  the  /\-  and  \/-links  are  unary,  S'  still  satisfies  the  vicious  circle  and 
connectedness  conditions,  i.e.,  S'  is  a  proof-net.  Thus  the  list  of  existential  terms 
in  (★)  yields  the  required  terms  t  =  1 1 , . . .  ,tn. 

Conversely,  suppose  T  =  A\ , . . . ,  An  consists  of  prenex  formulas  only  and  S' 
is  a  proof- net  without  cuts  and  with  conclusion  =  AJ, . . . ,  A* .  We  expand  S' 
to  a  proof-structure  S  with  conclusion  T,  by  introducing  suitable  /\-  and  \/-links. 
Since  these  links  axe  unary,  the  vicious  circle  and  connectedness  conditions  are 
still  satisfied  by  S'  and  we  need  to  check  only  the  parameters  condition.  Here  the 
eigen  variables  are  Herbrand’s  terms  of  the  form  y  [ti , . . . ,  t*]. 

Fact  3.  Let  tj,  t2,...,tn  be  all  the  eigenvariables  in  S,  and  for  all  i,  let  t,  be 
associated  with  Suppose  that  ti  >°  ti  >°  ...  >°  t„  and  Bi(ti)<C>B2(t2). 

Then  for  all  i  <  n,  tj  occurs  in  t,  . 

To  prove  Fact  3,  let  t  =  y[tj, . . . ,  t/t]  and  s  =  v[si,...,Sf]  be  the  eigenvariables 
associated  with  f\y.B ,  f\v.C,  respectively.  If  t  <°  s,  then  either  J5(t)CC(s)  or 
B(t),0’C'(s).  In  addition,  since  T  consists  of  prenex  formulas,  s  occurs  in  f\y-B  and, 
moreover,  we  have  the  following  properties. 

(1)  If  B(t)dC(s),  then  J5(t)  -<  C(s),  and  every  proper  subterm  s*  of  s  is  also  a 
proper  subterm  of  t. 

(2)  If  B(t)f}C( s),  then  s  is  a  proper  subterm  of  t  —  in  fact,  since  no  Herband’s 
term  occurs  in  the  conclusions  of  S,  there  is  a  link 

D(s) 


\Jz.D 
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with  /\  y.B  -<  D(s)  and  thus  in  y [ti , . . . ,  tjt]  some  t,  is  s. 

By  assumption  and  (2),  tj  is  a  proper  subterm  of  1 2.  For  3  >  2,  if  t2,...,tj  are  such 
that  Bj(tj)nBj-\(tj-i)C.  ...  CB2( t2)  then  tj  is  a  proper  subterm  of  t2,...,t;,  by 
(1).  Also,  if  then  tj  is  a  proper  subterm  of  tJ+1,  since  tj  is 

a  proper  subterm  of  tj+i  by  (2).  Proceeding  in  this  way,  we  conclude  that  tj  is  a 
proper  subterm  of  tn. 

To  finish  the  proof  of  the  theorem,  suppose  now  the  ordering  <<  is  not  strict 
in  <S,  i.e.,  t  =  ti  >°  t2  >°  . . .  >°  tn  =  t,  where  is  the  eigenvaxiable  associated 
with  f\y.Bi.  Since  ATF  implies  e(A')  C  e(F),  we  must  have  J5i(ti)0-B,+i(t;+i), 
for  some  i  and  we  may  assume  i  =  1.  It  follows  that  tj  is  a  proper  subterm  of  tn, 
a  contradiction.  ■ 

Remark  1.  If  T  contains  non-prenex  formulas,  S  is  a  proof-structure  with  conclu¬ 
sion  r  and  f\  x.A  and  f\ y.B  are  two  formula-occurrences  in  S  with  eigen  variables 
a  and  6,  respectively,  then  it  may  happen  that  b  occurs  inside  and  outside  e(A(a)), 
f\x.A  -ft  l\y.B  and  b  occurs  in  a  side  door  of  e(A(a))  but  not  in  f\x.A.  In  this 
case,  the  information  that  a  <°  b  cannot  be  reconstructed  from  n  and  must  be 
directly  obtained  by  the  analysis  of  the  empires. 

Remark  2.  Can  we  extend  the  Herbrand  Theorem  above  to  MALL?  How  should 
the  Herbrand  expansion  be  defined  in  this  case?  Consider  the  proof- structure  S 
with  conclusions  F  =  Ci, . . . ,  Cn,  Qx\  ...  Qxn.A  n  B ,  obtained  from 

«Si  «S2 

C,,...,Cn  A _ B  Ci,...,Cn 

AnB 

Qx i  . . .  Qxn.A  n  B 

by  introducing  appropriate  Contraction  links  and  suppose  Ci, . . . ,  Cn  and 
Qx\  . . .  Qxn.A  n  B  are  in  prenex  form.  Clearly  if  we  suppose  <Si  and  S2  do  not 
contain  any  occurrence  of  a  n-link  and  we  apply  the  procedure  in  the  only  if  part 
of  the  Theorem  to  the  displayed  structure,  we  obtain  a  structure  with  conclusions 


c;,...,C(AnB)*,c;*,...,c" 
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The  only  reasonable  solution  is  the  introduction  of  ®-  and  Contraction  links 
and  the  construction  of  a  proof-structure  with  conclusions  ^(P)  °f  form 

(cr  ®  cr (c;®cn,  (arb)*. 

In  general,  a  natural  idea  is  to  construct  Bp,  the  domain  of  order  p,  from  the 
Herbrand’s  functions  associated  with  formulas  in  T  =  A\ , . . . ,  An  and  to  let  the 
expansion  of  order  p  be  of  the  form 

{A\  ®  ...®  AJ1 (AJ,  ®  ...®  A«"), 

where  A J , . . . ,  A\'  result  from  A{  h  by  performing  all  possible  substitutions  of  terms 
of  Bp  for  the  existential  variables.  The  following  counterexample  shows  that  this 
form  of  Herbrand’s  Theorem  fails  in  MALL  even  in  the  case  of  sequents  of  prenex 
formulas. 

Counterexample.  (3)  Let  T  be 

Vs/. A r'pl(')u«1w,  V 2"rX(z)> 

A»-A*-V  ^i.\J  x2.(P(x1)  0 Q(y)  ®  R(z))  n  (P(x2)  ®Q(z)  ®R{y)) 

and  let  ^(r)  be  the  expansion  over  B2.  Then  b  T  is  not  derivable  in  MALL,  but 
b  £e{T)  is,  since 

b  (Px(x[y])  U  C?x(y))  ®  (Px(x[z])  U  QJ-( z)),  Px( y)  ®  Rx{ z), 

(P(x[y])  0  ^(y)  0  R(z))  n  (P(x[z])  0  Q(z)  <g>  R(y )) 

is  derivable  in  MALL. 

Remark  3.  V.  C.  V.  de  Paiva  [1989]  has  defined  the  Dialectica  Interpretation  in 
the  framework  of  Linear  Logic. 

Remark  4.  In  conclusion,  for  sequents  of  prenex  formulas  in  the  fragment  MLL 
we  have  a  very  informative  version  of  Herbrand’s  Theorem.  It  is  unfortunate  that 
we  cannot  refine  this  result  to  the  case  of  non-prenex  formulas,  in  which  the  number 
of  arguments  of  the  Herbrand’s  functions  is  minimized.  If  Linear  Logic  is  to  be  used 
to  make  the  constructive  content  of  proofs  explicit,  then  the  additional  information 
obtained  through  Linear  Logic  cannot  be  adequately  expressed  by  these  simple 
forms  of  Herbrand’s  Theorem. 
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10.2.1.  An  Application  for  Non  Prenex  Formulas. 

The  following  result  provides  a  way  to  extend  Herbrand’s  analysis  to  some  cases 
of  non-prenex  formulas  in  Direct  Logic. 

Definition.  Let  F  be  a  multiset  of  arbitrary  formula-occurrences  in  the  language 
£  of  DL. 

(i)  Let  sb  be  an  assignment  of  the  form  (Ai  •*+  P\ , . . . ,  An  P„ ),  with  the  following 

properties: 

(1)  for  all  i  <  n,  At  is  a  subformula  of  the  formula  occurrences  in  T,  P,  is  a 
propositional  letter  not  occurring  in  T ; 

(2)  for  all  i,j  <  n,  if  i  ^  j  then  P,  is  a  different  letter  from  P;,  and  A,  is  a  different 
formula-occurrence  from  A} . 

(ii)  A  proof  structure  with  prenex  \/-boxes  (S,  {Py},sb)  with  conclusion  T  is  a  proof- 
structure  with  V-boxes  (S,  {Py})  with  conclusion  T  (see  section  3.5.2)  together  with 
an  assignment  sb  =  ( A i  Pj , . . . ,  An  P„)  satisfying  the  properties  in  (i),  and  in 
addition  the  following  ones: 

(1)  For  every  structure  S'  €  S,  only  formula-occurrences  in  {Aj, . . . ,  An}  occur  in 
any  non- logical  axiom  of  S'. 

(2)  For  any  S'  £  S,  let  A,,,...  ,  A,n  be  a  list  of  all  subformulas  A{  occurring  in  a 
non-logical  axiom  of  S'  and  let  3b  be  the  result  of  replacing  every  such  At;  with 
Pij  throughout  S'.  Then  the  conclusions  of  3b  are  in  prenex  form. 

(iii)  Let  sb  be  as  in  (i).  Let  T//  be  the  Herbrand  form  of  T  and  let  £'  be  the  extension 
of  £  with  the  Herbrand  functions  of  T//.  For  some  t  in  £'  let  be  an  Herbrand 
expansion  of  T.  Finally,  let  sb//  be  the  assignment  (A*  P\ , . . . ,  A*  Pn),  where 
A*  is  the  subformula  in  corresponding  to  A,,  i.e,  the  formula  that  results  form 
A,  by  applying  the  substitutions  yielding  from  T. 

(iv)  Let  £'  and  be  as  in  (iii).  Define  a  box  7v//  (relatively  to  T^)  by  the 
condition 

(*) 


7^h(  A*(s);  A*(s)) 
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where  A*(s)  corresponds  to  an  essentially  universal  subformula  in  T  and  s  is  a  term 
of  £'  not  occurring  in  A^. 

(v)  Given  and  sbn  as  in  (iii),  a  proof- structure  with  prenex  E-boxes  (S,  {TZh },  sb# ) 
with  conclusion  is  a  proof-structure  with  H-boxes  and  with  an  assignment  sb// 
satisfying  the  following  properties. 

(1)  For  every  structure  S'  €  S,  only  formula-occurrences  in  {.4*, . . . ,  .4’ }  occur  in 
the  non-logical  axioms  of  S' . 

(2)  For  any  S'  6  S,  let  3b.  be  the  result  of  replacing  every  A*  that  occurs  in  a 
non-logical  axiom  of  S'  with  P,  throughout  S' .  Then  the  conclusions  of  S'sbfi  are 
Herbrand’s  expansions  of  formulas  in  prenex  form. 

Theorem.  Let  T  be  a  multiset  of  arbitrary  first  order  formulas  in  a  language  £  for 
DL,  let  T h  be  the  Herbrand  form  of  T  and  let  £'  be  the  extension  of  £  with  the 
Eerbrand  functions  o/T//. 

(i)  If  S  is  a  proof-net  with  conclusions  T,  then  the  procedure  for  Eerbrand's  Theorem 
in  section  (10.2)  still  yields  terms  t  €  £'  and  a  proof-net  S*  with  conclusions 

(ii)  Let  (S,  {7v!.//},sb//)  be  a  proof- structure  with  prenex  E-boxes  and  with  conclusion 
rfcH,  for  some  t  €  £' ■  If  { S,  {7£//},sb//)  is  a  proof-net,  then  from  it  we  can  construct 
a  proof-net  with  conclusion  T. 

Proof,  (i)  The  procedure  for  the  only  if  direction  of  Herbrand’s  Theorem  for  DL 
(section  10.2)  does  not  depend  on  the  fact  that  the  formula  in  T  are  in  prenex 
form.  In  particular,  deleting  o^-premise  links  does  not  affect  the  vicious  circle  and 
connectedness  conditions. 

(ii)  If  (S,  {7?.//},  sb//)  is  a  proof-net,  then  each  proof-structure  S'  €  S  is  a  proof-net, 
possibly  with  non-logical  axioms.  Moreover,  each  proof-structure  S'  =  S'  [  pM  ]  . . .  [  p’4  ] , 
after  replacement  of  the  formulas  occurring  in  the  non-nonlogical  axioms  with 
atomic  letters,  is  such  that  its  conclusions  are  Herbrand’s  expansions  of  prenex 
formulas.  Thus  the  if  direction  of  Herbrand's  Theorem,  section  (10.2),  applies  to 
each  Sp  and  yields  a  proof-net  <S”,  possibly  with  non-logical  axioms.  Each  proof- 
net  S"  =  Sp  [^M  ]  . . .  [^'*  ] ,  after  replacement  of  the  atomic  letters  occu.ring  in  the 
non-nonlogical  axioms  with  the  corresponding  formulas  in  the  assignment  sb  has 
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the  property  that  its  conclusions  are  subformulas  of  T.  Let  S'  be  the  set  of  all  the 
structures  S'.  The  conditions  on  the  box  TZh  guarantee  that  each  relation 

(*)  nH(Al,A*(sy,^H.A*(s)) 

becomes  a  relation 

(**)  7lv(A,/\x.A;A,A(a)), 

i.e.,  (S',  {7vv}, sb)  is  a  a  proof  structure  with  prenex  V-boxes.  The  elimination  of 
the  /\-boxes  by  the  parameters  condition  is  a  consequence  of  th°  results  in  Section 
(4.6).  ■ 

10.3.  n2-Cut  and  Herbrand’s  Theorem  in  Linear  Logic. 

The  Herbrand  Theorem  is  defined  for  derivations  (or  proof-nets)  in  MLL  with¬ 
out  Cut.  Let  U2- Cut  denote  the  Cut  rule,  restricted  to  Cut  formulas  in  n2  form. 
We  extend  the  definition  of  Herbrand  expansion  to  certain  sequent  derivations  con¬ 
taining  II2-Cuts  in  MLL.  We  write  II2-Cut-MLL  for  the  sequent  calculus  MLL 
where  the  rule  Cut  is  restricted  to  Il2  formulas. 

Let  h  T,  A  and  h  A^,  A  be  sequents  in  MLL  such  that  all  formulas  in  T,  A  are  in 
prenex  form,  and  A  is  /\x.  V  y-B,  with  B  quantifier-free. 

Let  x  and  y  be  lists  of  all  the  Herbrand  functions  occurring  in  Th  and  of  A#, 
respectively,  and  let  x  and  y  be  the  Herbrand  functions  occurring  in  Ah ,  ( Aj-)h , 
respectively.  Let  C\  [C2]  be  the  languages  obtained  extending  C  with  x  and  the 
terms  in  x,  [with  y  and  the  terms  in  y,  respectively].  Also  let  C  be  the  extension 
of  C  by  the  terms  in  x,  y . 

Lemma,  (i)  If  the  Herbrand  theorem,  holds  for  T,  A  and  AT,  A  with  expansions 

an&  (-^"^H'Af/, 

respectively,  where  r,  s  belong  to  C\  and  t,u,  belong  to  C2 ,  then  the  Herbrand  The¬ 
orem  holds  for  T,  A,  with  expansion 
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for  some  lists  r '  and  u'  of  terms  of  C . 

(ii)  Let  S\  and  S2  be  proof-nets  for  MLL  with  conclusions  F,.4  and  A^,A  and 
without  cuts,  and  let  Sq  be  the  result  of  applying  the  cut- elimination  procedure  to 
the  cut  A  (g)  A1-  in  S\  ,4®^  $2-  Let  rrH,A^  be  the  Herbrand  expansion  given  by 
(i)  and  let  TrH  ,  A'fa  be  the  Herbrand  expansion  given  by  the  Herbrand  Theorem  in 
section  (10.2)  applied  to  So-  Then  r'  coincides  with  r"  and  u'  coincides  with  u". 

Proof,  (i)  We  have 

A*H  =  B{x,s),  and  (Ax)^  =  Bx(t,y[t]). 

where  s  is  a  term  of  C\ .  We  write  t  [^]  or  X  [*(]  for  the  result  of  substituting  z  for 
every  occurrence  of  y  in  t  or  X.  If  t  =  t\ , . . . ,  tn,  then  t[yz]  is  the  list  t\  [^] , . . . ,  tn  [!(] . 
We  write  Ax.s[x]  with  the  obvious  meaning,  and  if  x  does  not  occur  in  s,  then 
Ax.s[x]  =  s. 

Consider  r',  s',  t  and  u'  obtained  by  the  following  steps: 

(I) Let  S'  =  “d  t'  = 

(II)  Let  r'  =  r[*]  and  s'  =  s[*]. 

Clearly  the  terms  s',  t'  and  those  in  r ',  u'  belong  to  £'.  We  claim  that  Herbrand’s 
Theorem  holds  for  T,  A  with  expansion  T^’,  A^. 

Suppose  Si,  S2  axe  proof-nets  with  conclusions  T,  A  and  A-1,  A,  respectively, 
and  that  ,  Sj  3X6  the  proof-nets  with  conclusions  ,  A*H  and  (A±)tH,Af{,  respec¬ 
tively,  given  by  Herbrand’s  Theorem.  Replace  Ax.s[x]  for  Ax.y[x]  everywhere  in  S2 ; 
replace  t'  for  x  everywhere  in  S\.  We  obtain  proof-nets  S" ,  S'f  with  conclusions 
,  A*  and  (A*)±,A'^ ,  where  A *  =  B(t\  s[t']).  In  conclusion,  S['  a-  $2  is 

a  proof-net  in  propositional  MLL  with  conclusion  ,  Afj. 

Conversely,  if  we  have  a  proof-net  5"  S'f  with  conclusion  ,  A^ 

and  cut  A*  0  A*  x  for  propositional  MLL.  then  we  can  apply  the  cut-elimination 
theorem  and  obtain  a  cut-free  proof-net  Sq  with  the  same  conclusion.  Now  the 
Herbrand  Theorem  in  section  (10.2)  applied  to  Sq  yields  a  proof-net  with  conclusion 

r,A. 
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(ii)  Consider  5  =  <Si  a®  a1-  $2- 


Si  e>2 

B(a,s)  B^(t,b) 

V  y-B(a,  y)  A  y-Bx(t,y) 

A  x.\Jy.B(x,y)  \/  x.  f\y.BL(t,y) 
A®A± 


Let  a*  (a)  [or  ( b )  *  6]  be  lists  of  all  the  eigenvariables  occurring  in  <$i  [or  £2].  Notice 
that  b  does  not  occur  in  t,  since  b  occurs  only  inside  the  empire  of  B(t,b).  Let  f  [or 
u]  be  a  list  of  all  the  terms  w  different  from  s  [or  t]  such  that  if  w  occurs  in  r  [or  in 
if],  then  for  some  C 

C(w) 

V  x.C(x) 


is  a  link  of  5i  [or  of  £2]-  We  assume  that  T,  A  and  A-1,  A  consist  of  closed  formulas, 
thus  no  eigenvariable  occurs  in  A.  Hence  in  S  there  are  no  eigenvariables  c,  d  such 
that  c  occurs  in  S\ ,  d  occurs  in  S 2  and  either  c  <°  d  or  d  <°  c. 

The  first  two  steps  of  the  cut-elimination  procedure  involve  the  following  sub¬ 
stitutions: 


(1)  replace  t  for  a  everywhere  in  $1.  We  write  Si  [“]  for  the  resulting  substructure. 

Let  f'  =  r[“],  =  s[‘], 

(2)  replace  s'  for  b  everywhere  in  52.  We  write  S2  [<(]  for  the  resulting  substructure. 
Let  if'  =  u[46,]. 

Let  5*  be  the  proof-net  resulting  from  the  two  step  in  question.  Notice  that  the 
other  steps  of  the  cut-elimination  procedure  involve  only  propositional  reductions, 
since  B  is  quantifier-free  and  that  in  MLL  propositional  steps  do  not  affect  the  lists 


Fact  4.  In  5*,  if  d  is  any  eigenvariable  occurring  in  t  and  e  is  an  eigenvariable  in 
a,  then  we  cannot  have  d  <t  e. 


Otherwise,  suppose  d  <°  cj  <°  . . .  <°  cn  <°  e,  where  d,  C\ , . . . ,  c„  Eire  all  in  b.  Since 
all  formulas  in  T,  A  are  prenex,  it  follows  that  if  c,  e  are  eigenvariables  and  c  is 
associated  with  the  quantifier  f\x.C  then  c  <°  e  only  if  e  occurs  in  [ \x.C .  From 
this  fact  we  may  conclude  that  d  <°  Cj  <°  ...  <°  cn  also  in  5,  and  furthermore, 
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that  in  S *  the  eigenvariable  e  occurs  in  f\  x.Cn,  where  c„  is  associated  with  f\x.Cn. 
Since  f\x.Cn  occurs  in  <S2  [36,] ,  e  must  occur  in  s'.  By  the  Fact  in  the  proof  of  the 
Reduction  Lemma,  /\-ca se,  section  (7.3),  in  S  we  must  have  cn  <t  b  and  since  d 
occurs  in  t,  b  <°  d.  Thus  in  S  we  have 


<°  Cj 


<l 


<°  Cn  <,  b  <°  d. 


a  contradiction. 

Fact  5.  Let  e,  d  be  any  eigenvariables  in  a,  b,  respectively.  Suppose  that  there  is  an 
occurrence  of  e  in  f '  or  in  s'  and  that  e  <t  d  in  S* .  Then  there  are  eigenvariables 
6q  ,  d q  and  a  link 

C{t) 

\j  x.C(x) 

such  that  in  S* 

(i)  e0  <°  d°  and  e  <t  e0  and  d0  <t  d  (where  “  x  <t  y  ”  means  “  x  =  y  or  x  <t  y  ”); 

(ii)  do  occurs  in  t; 

(iii)  if  eQ  is  associated  with  f\x.Eo,  then  /\ x.Eo  -<  C(t). 

Since  e  <t  d,  consider  the  first  e0,  do  (starting  from  e)  such  that  e  <t  e0  <°  d0  <t  d, 
and  moreover  e, . . . ,  eo  belong  to  a  and  do  belongs  to  b.  Since  all  formulas  in  T  are 
prenex,  do  must  occur  in  Eo(eo)  and  since  E o  occurs  in  Si  [“],  it  follows  that  do 
occurs  in  t.  Since  no  eigenvariable  occurs  in  T,  A,  there  must  be  a  V-link  satisfying 
(iii). 

A  similar  argument  shows  that 

Fact  6.  Let  e,  d  be  any  eigenvariables  in  a,  b,  respectively.  Suppose  +hat  there  is 
an  occurrence  of  d  in  u  such  that  d  <t  e  in  S *.  Then  there  are  eigenvariables  to, 
do  and  a  link 

C(s') 

V  x.C(z) 

such  that  m  <S* 

(i)  do  <°  e°  and  d  <t  do  and  eo  <«  e; 

(ii)  eo  occurs  in  s' ; 

(iii)  if  do  is  associated  with  f\x.Do,  then  f\x.Do  ~<  C(s'). 
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Consider  now  the  procedure  for  Herbrand’s  Theorem  for  MLL  applied  to  5*1 
It  produces  a  pair  of  lists 

[0]s*  Vi  [u>i ,!,... ,!!>!,*!  I, . . . ,  vA[u>fc,i,  rj,. . .  ,r'p,  u[,.. .  ,u'q,<i',t. 

where  vt[wI}1, w.^J  is  either  Xj[u»i,i , re,,*,]  or  ic,,*,],  and  in  h  steps 

it  yields  a  pair  of  lists 

Write  r  "  for  r", . . . ,  r"  and  u"  for  u", . . . ,  u". 

We  need  to  compare  r",  s",  t",  u"  with  the  terms  r',  s',  t',  u'  obtained  from 
the  procedure  described  in  part  (i).  First  Herbrand’s  Theorem  for  MLL  is  applied 
to  the  cut-free  proof-nets  tS)  and  S2 .  For  Si  the  procedure  produces  a  pair  of  lists 

[0)5,  X,  X]  [tT(j  rl,k}  ]?•••>  Xmfl'm.l  i  •••>  rm,fcm]i  r\ i  •  •  ■  irpi  si 

and  in  m  steps  it  yields  a  pair  of  lists 

(*)«»  x,Xi[ri,i,...,rIifcl], . . .  ,xm[rm,i,...,rm,*m];  it,. . .  ,rp,s. 

We  let  r  be  it , . . . ,  rp.  Similarly,  for  S2  we  obtain 

[0]s2  yi[ui,!,  ...,uiifcl],  •  •  •  ,y [<],  •  •  •  ,y<[tt/,i,  uu  . . .  ,u„t, 

and  in  i  steps 

(*)$»  Yi [ui.ii  -1  •  •  •  > y [t],  •  •  ■  ,y^[u/,i , uj , . . . ,  u?,  t. 

We  let  u  be  U] , . . . ,  u?.  The  terms  r ',  s',  t',  u'  are  obtained  from  r,  s,  t,  u  by  the 
substitutions  (I)  and  (II)  described  in  part  (i). 

We  can  obtain  more  information  about  r ',  s',  t',  u'  from  the  following  remark. 
Notice  that  in  the  derivation 

s2- 

Bx(t,b)  A 

f\y.Bx{t,y) 

Notice  that  in  Sm  the  only  cut  is  a  quantifier-free  formula. 
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the  Herbrand  function  associated  with  /\  y  is  y  and  that  Herbrand’s  Theorem  holds 
for  f\ y),  A  with  the  expansion  such  that  y  does  not  occur  in 

t"'. 

Indeed,  the  procedure  for  Herbrand -s  Theorem  applied  to  <S^~  produces  the  pair 
of  list 


[0] c-  ,yilue,u--irt,ki]\ 

2 

and  in  £  steps 


We  write  u'"  for  u'/', . . .  ,  u"'.  Suppose  y  occurs  in  t'" .  Then  there  is  a  sequence  of 
substitutions 


LyiiK,!,.. 


.y  *2  [^*2 .1  ■>  '”1  U»2,fc.2 


and  by  Fact  1  in  section  (10.2)  b  >t  ...  >t  b{7  >t  bH.  Since  6,,  occurs  both 
in  3-L(t,6)  and  in  f\  y.5x(t,  y),  it  follows  that  6^  >°  6,  thus  b  >t  £>,,  >°  b,  a 
coiitradiction. 

Moreover,  in  MLL  we  may  assume  that  eigen  variables  and  Herbrand’s  func¬ 
tions  associated  with  different  /\-links  are  distinct,  therefore  we  may  let2 


In  onclusion,  we  obtain 


2  Notice  that  in  the  case  of  a  logic  with  Contraction,  e.g.,  in  MALL,  if  \J  x.  f\  y.Bx{t,y) 
was  the  conclusion  of  a  Contraction  link,  then  a  term  of  the  form  y[w],  may  occur  in 
(  for  some  w  different  from  t  —  in  fact  y[w]  may  occur  in  t. 
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We  conclude  the  proof  of  the  Lemma  and  show  that  the  terms  r",  s",  t",  u", 
which  are  obtained  by  applying  Herbrand’s  Theorem  after  eliminating  the  (first 
order)  cut  in  S,  coincide  with  the  terms  r s',  t',  u',  which  are  obtained  by  per¬ 
forming  the  substitutions  described  in  part  (i)  after  applying  Herbrand’s  Theorem 
separately  to  S \  and  in  S 2. 

By  Fact  4,  if  the  eigenvariables  d,  dj  are  such  that  d  occurs  in  t  and  d  <t  d\ 
in  <S*,  then  d\  is  in  b.  Therefore  we  may  conclude  that  d  <t  d\  in  S*  if  and  only 
if  d  <t  d\  in  <S2.  Consider  the  list  of  universal  terms  in  [0]s»:  it  follows  that 
only  Herbrand’s  functions  of  the  form  z, may  occur  in  any  chain  of 

substitutions  beginning  with  the  replacement  of  some  eigenvariable  in  f,  by  Fact 
1.  Moreover,  the  ordering  of  the  terms  in  [0]s-  and  of  the  terms 

yi[ujti,  in  [0]s2  both  preserve  the  same  relations  d  <t  d\  between  the  eigen¬ 

variables  b  in  S*  and  in  <S2.  Therefore  by  Fact  2  the  term  t"  in  (★)$•  coincides  with 
the  term  t  in  (*).s2.  But  t'  =  t,  thus  t'  =  t". 

If  e',  e"  are  eigenvariables  in  a,  then  in  S* ,  by  Facts  4  and  5  there  is  no  d  £  b 
such  that  e'  <t  d  <t  e".  Also,  there  is  no  e  €  a  such  that  a  <°  e  in  S\.  Therefore 
using  the  Fact  in  the  proof  of  the  Reduction  Lemma,  /\-case,  section  (7.3),  we  may 
conclude  that  e'  <t  e"  in  5*  if  and  only  if  e1  <t  e"  in  Si.  Let  x'fuj,. . .  and 
x"[u", . . . ,  ujt';,]  be  the  Herbrand  functions  associated  with  e',  e",  respectively.  Then 
by  arguing  like  in  the  previous  paragraph  we  conclude  that  x"  occurs  in  the  term 
x'[w'j , . . . ,  w^,]  of  (*)5*  if  and  only  if  x"  occurs  in  the  term  x'[r'j , . . . ,  r'fc,]  of  (★)sl 
Similarly,  x"  occurs  in  the  term  s"  of  (*)s*  if  and  only  if  x"  occurs  in  the  term  s 
of  (*)sj  • 

Moreover,  if  y'[zi, . . .  ,Zfc]  is  associated  with  any  eigenvariable  d  £  b  and  y' 
occurs  in  the  term  x'[wj, . . . ,  w^,]  of  (+)s-  then  e'  <t  d  by  Fact  1.  It  follows  from 
Fact  5  that  y'  occurs  only  in  t  and  that  t  is  a  subterm  of  x'[w', , . . . ,  w^,].  Similarly, 
any  occurrence  of  y'  in  s"  is  within  the  subterm  t  of  s" . 

Finally,  for  any  occurrence  of  the  Herbrand  function  x  in  any  term  x'[r'j . r'k,} 

of  (★)s1,  there  is  an  occurrence  of  t  in  the  term  x'[w'j, . . . ,  w^,]  of  (★)$•,  since  x 
corresponds  to  the  eigenvariable  a  of  <S]  and  t  is  replaced  for  a  in  5*.  Similarly, 
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any  occurrence  of  x  in  the  term  s  of  (*)s, ,  corresponds  to  an  occurrence  of  t  in  the 
term  s"  of  (*)5* .  We  conclude  that 


The  argument  for  r"  =  r '  is  similar.  To  show  u"  =  u'  we  argue  in  the  same 
way,  using  Fact  6  instead  of  Fact  5.  ■ 

Despite  all  the  restrictions,  the  above  result  is  useful,  since  it  allows  us  to  apply 
the  Herbrand  Theorem  to  the  derivations  of  the  premises  of  certain  Cuts,  without 
losing  any  information. 

10.3.1.  Il2-Induction  in  Linear  Logic. 

Definition.  Let  II2TR  be  the  induction  rule 

h  >1(0)  b  >l'L(n),  A(n  +  1) 
b  A(t) 

where  >1(2)  is  in  II2  form  and  t  is  any  term.  Let  Il2-Cut  IR-MLL  be  MLL  with  the 
addition  of  the  II2-IR,  where  the  rule  of  Cut  is  restricted  to  formulas  in  Il2-form. 

Remark.  If  in  the  conclusion  A(t )  of  an  application  of  the  I^-Induction  Rule  the 
term  t  is  a  numeral,  then  the  induction  rule  can  be  replaced  by  t  applications  of 
Cut. 

Lemma,  (i)  Let  b  >1(0)  and  b  .A  ■*■(«),  ,A(n  +  1)  be  sequent s  the  language  C  for 
MLL  such  that  A(z)  is  of  the  form  f\x.\/  y.B(x,y,  z),  with  B  quantifier- free.  Let 
Herbrand’s  Theorem  hold  for  both  sequents  with  Herbrand’s  expansions 

B(x,  s0,0)  and  B(t„,y[t„],n),B(x,s„+1,n  +  1), 


respectively.  Define 

f(0,  x)  =  s0; 

Ax.yfxl 

f(n  +  1,  x)  —  sn+]  .  . 

Ax.f(n,x) 

Then  for  each  number  n,  the  Herbrand  Theorem  holds  for  b  >l(n)  with  Herbrand's 


expansion  B(x,f(n,x),n). 
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(ii)  Let  V  be  a  derivation  in  El2-Cut-IR-MLL  of  a  sequent  h  T,  such  that  all 
formulas  of  T  are  closed  and  prenex.  In  addition  suppose  that  the  term  t  in  each 
conclusion  A(t )  of  the  Induction  Rule  is  a  numeral.  Let  P]  result  from  P  by  elimi¬ 
nating  all  occurrences  of  Cut  and  Induction.  Moreover,  let  C  be  the  extensions  of 
C  with  the  Herbrand  functions  for  the  universal  quantifiers  occurring  in  Pj  and  let 
C"  be  the  extensions  of  £  with  the  Herbrand  functions  for  the  universal  quantifiers 
occurring  in  V  and  the  scheme  of  definition  by  primitive  recursion.  Then  there 
are  terms  t'  in  £'  and  term  t"  in  £"  such  that  Herbrand’s  Theorem  holds  with 
expansions  and  T#  and  for  each  i  and  t'  6  t',  t"  €  t" 


(iii)  Let  P  be  a  derivation  in  Il2-Ciit-IR-MLL  of  a  sequent  I\  such  that  all 
formulas  of  T  are  closed  and  prenex.  Let  y  be  a  list  of  all  Herbrand’s  functions  for 
the  universal  quantifiers  occurring  in  P  and  let  £'  be  the  language  £,  extended  with 
y  and  the  scheme  of  definition  by  primitive  recursion.  Define  as  in  (i),  where 
the  terms  in  t  belong  to  C .  Then  (I"#^])  is  true  for  any  choice  of  (appropriate) 
numerical  functions  and  constants  s  for  y. 

Proof-  (i)  and  (ii)  follow  from  (i)  and  (ii)  of  the  Lemma  in  section  (10.3)  and 
the  above  Remark,  (iii)  follows  from  (ii).  (iii)  defines  a  rudimentary  functional 
interpretation  for  the  fragment  of  Peano  Arithmetic  under  consideration.  ■ 

Remark.  Let  be  a  quantificational  link  in  a  proof-net  S.  We  say  that  x 
is  traceable  to  a  (logical)  axiom  if  there  is  no  proof-net  S'  such  that  t  does  not  occur 
in  any  axiom  of  S'  and  S'  results  from  S  only  by  renaming  eigenvariables  and  terms 
in  links  different  from  .  It  is  easy  to  see  that  the  Lemma  can  be  extended  to 
sequent  derivations  in  Direct  Logic  with  I^-Cut  and  II2-IR,  if  for  every  quantifier 
Qx.C  occurring  a  Cut  or  Induction  formula,  the  occurrences  of  x  in  both  premises 
of  the  Cut  or  Induction  can  be  traced  to  some  axiom. 

10.4.  Functionals  of  Classical  Predicate  Calculus. 

The  system  obtained  by  adding  the  unrestricted  Contraction  Rule  to  the  se¬ 
quent  calculus  for  LD+  clearly  is  simply  (a  reformulation  of)  LK.  Suppose  in  the 


Section  10 


165 


given  language  L  conditional  terms  if  ...  then  .  .  .  else  .  .  .  axe  definable. 
Consider  an  instance  of  Contraction 

h  t,a,a 

i-  r,  a 

and  let  be  an  Herbrand  expansion  for  the  upper  sequent.  Let  x  and 

x'  be  the  Herbrand  functions  occurring  in  the  two  occurrences  of  Ah'-  clearly  if 
x  =  Xj , . . . ,  Xfc  and  x'  =  x'j , . . . ,  x'k,  then  x,  and  x'  have  the  same  arity  and  can  be 
identified.  Also  s  =  Sj , . . . ,  sm  and  t  =  tj , . . . ,  tm .  Define  u  =  Uj , . . . ,  un  by  letting 
for  each  i  <  n 

u,  =  if  Ash  then  s,  else  t,. 

Let  TrH,A^  be  the  Herbrand  expansion  for  the  lower  sequent.  We  can  show  by  a 
semantic  argument  that  Herbrand’s  Theorem  holds  for  VrH,  ASH,  AlH  if  and  only  if  it 
holds  for  T# ,  AjJf . 

10.5.  No  Counterexample  Interpretation. 

The  Herbrand  theorem  fails  if  LK  is  extended  by  the  unrestricted  induction 
rule:  we  need  a  functional  interpretation,  the  No  Counterexample  Interpretation 
(NCI).  Let  C  be  the  first  order  language  of  Peano  Arithmetic.  If  S  :  T  h  A 
is  any  sequent  in  £,  let  C  be  L  extended  by  the  Herbrand  functions  for  5  as 
above.  Then  the  language  Cf  of  the  NCI  is  C!  extended  by  functionals  of  type 
<  2:  Ayi  . . .  ym.JA(yi, . . .  ,ym),  for  the  essentially  existential  quantifiers  of  5.  The 
functionals  are  defined  by  o-recursion,  for  ordinals  a  <  eo  ( extended  Grzegorczyk 
hierarchy)  (See  Rose  [1984]).  Consider  the  extended  Ackermann  functions 

fi(x)  =2x 

fa+l(x)  =fiZ\x), 

fa(x)  =fa(z){x),  for  a  limit. 

where  denotes  the  x-th  iteration  of  /  and  where  a(x)  is  the  x-th  element  in 
the  natural  sequence  for  a,  defined  as  follows. 

If 


O  —  ...  +  TltL)Q> 
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is  in  Cantor  normal  form,  then  a(x)  is  inductively  defined  by 

a(x )  =  niu>Ql  +  . . .  +  +  (n«  —  l)u;0'  +  iw^1  if  o<  =  fit  +  1, 

a(x)  =  njw01  +  . . .  +  nt-iu;a,-x  +  (n*  -  l)u.’Q’(  +  u.'a,(x)  if  a  is  limit. 

A  function  /  dominates  g  if  there  is  a  no  such  that  f(n)  >  g(n )  for  all  n  > 
no-  Remember  that  the  closure  of  Grzegorczyk’s  class  £m  under  one  application 
of  the  scheme  of  primitive  recursion  is  £m+i  and  that  the  Ackermann  function 
fx(x)  dominates  all  primitive  recursive  functions  (see  Rose  [1984]  ,  Chapter  2).  In 
general,  the  functions  of  Grzegorczyk’s  class  £p  are  dominated  by  fa ,  with  fi  <  a. 

No  Counterexample  Interpretation.  (Kreisel  [1952],  see  also  Tait  [1965 
a]  and  [1965  b])  Let  4>  :  VyiBxj  . . .  Vyn3xn.t%i ,  x\ ,  ^2,  •  •  •  J/n,  *n)  be  a  theorem  of 
PA,  with  xp  quantifier- free. 3  Then  there  exist  functionals  X\,  Xn,  which  are 
a-recursive  in  y  =  yi,...,yn  such  that  if  4 >F  is 


4>f  : 


^(yi^i(y).y2[^i(y)],...,y»[x1(S?),...,^«-i(y)],x11(y)) 


then  4>f  \j\  is  true  for  every  choice  of  (appropriate)  numerical  functions  f  for  y. 


We  may  choose  the  Herbrand  functions  using  the  least  number  principle: 

(Vy.^(y))  =  4>(M-~'<t>(y))-  Then 

Corollary.  Let  4>  be  \/x3y.xp(x,y)  and  let  F  be  a  function(al)  such  that  F(a)  is  the 
least  y  such  that  xp(a,  y)  holds.  If  F  dominates  fQ  for  all  a  <  to,  then  PA  cannot 
prove  <f).  ■ 


Finally,  as  G.  Kreisel  has  often  pointed  out,  the  following  fact  is  very  useful 
in  application.  To  prove  it,  use  the  fact  that  the  functional  interpretation  of  a  II? 
lemma  Vx.A(x)  is  A(x),  where  x  is  0-ary. 


Proposition.  The  functional  F  such  that  Vx.<^(x,  F(x),  constructed  by  interpreting 
a  given  proof  of  Vx.3y.(^(x,  y),  does  not  depend  on  the  proofs  ofTi\  Lemmas.  ■ 


3 


For  expository  purpose  it  is  convenient  to  consider  prenex  formulas. 
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10.6.  A  Primitive  Functional  Interpretation. 

Consider  the  induction  rule  in  the  form 

hT,A(0)  h  T,A-L(n),A(n  +  1) 
Hr  ,A(t) 


where  A(z )  is  in  II2  form  and  t  is  any  term.  Suppose  the  upper  sequents  have 
Herbrand’s  expansions  P$  ,  B(x,  s0,0)  and  +  ,  B±(tn,  y[tn],  n),  R(x,  sn+i ,  n  + 
1).  and  let  v  be  a  list  of  all  the  Herbrand  functions  in  Th-  Define 


f(0,v,x) 
f(n  +  1,  v,  x) 


Ax.y[x] 
Ax.f(n,  v,x) 


Let  k  be  the  length  of  w",  In  addition,  for  each  j  <  k  we  define  by  simultaneous 
recursion  terms  g j  as  follows.  Let  gn  =  gi(n,  v,x), . . .  ,  g*(n,  v,  x).  Then 


gj(0,  v,x)  =w°; 

g_,-(n  +  l,v,x)  =  gj(n,v,x),  if  is  true, 

=  w"+1  otherwise. 


Let  Il2-Cut-IR  the  system  based  on  the  language  £  of  Peano  Arithmetic  and  on  the 
logical  rules  for  the  sequent  calculus  LK  and  axiom  and  rules  for  first  order  Peano 
Arithmetic,  where  the  rule  of  Cut  is  restricted  to  II2  formulas  and,  in  addition, 
the  Induction  rule  is  restricted  to  II2  induction  formulas,  but  possibly  contains 
arbitrary  passive  formulas.  We  can  define  a  simple  form  of  the  No  Counterexample 
Interpretation  for  Il2-Cut-IR. 

Primitive  Functional  Interpretation.  Let  V  be  a  derivation  of\~T  in  Il2-Cut- 
IR  and  let  y  =  yi,...,yn  be  all  the  Herbrand  functions  for  the  universal  quantifiers 
occurring  in  V.  There  exist  functionals  X  =  A'i,  ...,  A'n,  which  are  primitive 
recursive  in  y  such  that 

rx 

1  H 

is  true  for  every  choice  of  (appropriate)  numerical  functions  f  for  y.  ■ 

Despite  its  restrictions,  the  above  interpretation  is  enough  for  our  application  to 
the  Infinite  Ramsey  Theorem. 
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10.7.  Functionals  in  fragments  of  PA. 

The  primitive  functional  interpretation  is  related  to  the  following  classical  re¬ 
sults  of  the  proof  theory  of  fragments  of  arithmetic  and  weak  subsystem  of  analysis, 
established  by  Parsons  and  Mine  and  reuned  by  Sieg  [1985]  and  [1988],  These 
results  provide  a  general  method  to  obtain  sharp  upper  bounds  on  the  complexity 
of  the  functionals. 

Let  ( QF  —  I  A)  be  the  fragment  of  first  order  arithmetic  PA  in  which  first 
order  quantification  is  allowed,  but  the  induction  formula  in  the  induction  axiom 
IA  is  quantifier-free;  {QF  —  IA)  is  a  conservative  extension  of  primitive  recursive 
arithmetic  PRA.  Let  F  be  any  set. of  functions  that  includes  the  functions  of 
Grzegorczyk’s  class  £3  and  let  Fk  be  the  fc-th  class  of  Grzegorczyk’s  hierarchy, 
relativized  to  F.  Let  ( QF{Fk )  —  IA)  be  the  subsystem  of  {QF  —  IA)  where  only 
function  symbols  and  defining  axioms  for  the  functions  of  the  class  Fk  are  allowed. 
We  obtain  a  hierarchy  of  proper  subsystems  of  {QF  —  IA);  indeed,  the  reflection 
principle  for  ( QF{Fm )  —  IA)  can  be  proved  in  {QFm+ 2  —  IA)  (Sieg  [1988]  ). 

Restriction  of  the  number  of  applications  of  (11?  — IR)  yields  the  same  hierarchy. 
Let  (n°(^)  —  IR)jt  be  the  fragment  that  allows  at  most  k  applications  of  the  II?- 
induction  rule  and,  in  addition,  only  function  symbols  and  defining  axioms  for  the 
functions  of  F ■ 

Theorem  (Sieg  [1988]).  (1 12{F)  —  IR)*  and  (QF^*)  —  IA)  prove  the  same 

sentences  in  the  language  of  (H?^)  —  IR);  this  holds  also  for  extensions  of  the 
theories  by  II?  -  sentences.  In  particular,  (11?  —  IR)  is  conservative  over  PRA. 

Now  the  corollary  of  the  Cut-Elimination  Theorem  (section  10)  gives  the  fol¬ 
lowing  information. 

Corollary  (Sieg  [1988]).  If  {U02(F)  -  lR)k  proves  a  Yi^-sentence  Vx3y.4>{x,y), 
then  there  is  a  function(al)  F  €  Fk,  such  that  (QF {Fk)  —  IA)  proves  <j>(a,F(a)). 

10.8.  Discussion  on  Implementation. 

If  we  consider  the  problem  of  extracting  computational  information  from  given 
mathematical  proofs  in  practical  terms,  rather  than  as  a  general  metamathematical 
issue,  then  the  main  task  is  to  design  procedures  that  are  simple  to  implement,  easy 
to  manage  and  perspicuous  in  their  application. 
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We  intend  to  implement  the  No  Counterexample  Interpretation  (NCI),  which 
has  been  efficiently  applied  for  the  purpose  of  unwinding  in  previous  applications 
(consider,  for  instance,  Girard  [1987  a]  pp. 484-496,  Luckhardt  [1989]  ). 

To  this  purpose,  the  most  striking  result  of  our  analysis  is  the  Herbrand  Theo¬ 
rem  for  sequents  of  prenex  formulas  in  MLL,  Multiplicative  Linear  Logic.  For  such 
a  sequent  T  the  Herbrand  expansion  is  such  that  the  expansion  of  each  formula 
has  length  one,  and  is  obtained  by  substitution  of  the  bound  variables  by  terms 
t  of  the  “Herbrand  universe”.  Given  a  proof-net  with  conclusions  T  and  without 
cuts,  a  proof  net  with  conclusion  F#  is  obtained  by  simple  substitutions  and  can¬ 
cellation  of  the  lowermost  quantificational  links.  Conversely,  given  a  procf-net  with 
conclusion  a  proof-net  for  T  is  immediately  reconstructed  and  its  correctness 
verified  in  a  straightforward  manner.  Traditional  proofs  of  Herbrand’s  Theorem 
involve  complicated  manipulations  of  uninspiring  notations. 

The  same  proof  extends  to  the  system  LD+  of  D'rect  Logic.  The  result  can 
also  be  extended  to  proof-nets  containing  certain  forms  of  cut.  Using  the  same 
technique,  for  fragments  of  arithmetic  with  the  ^-Induction  Rule  we  can  obtain  a 
restricted  form  of  functional  interpretation,  in  which  the  functionals  are  primitive 
recursive  m  the  Herbrand’s  functions.  Again,  if  the  Induction  Rule  is  restricted  to 
induction  formulas  in  H2-  form,  the  definition  and  the  verification  of  correctness  of 
the  interpretation  is  entirely  sti  aightforward. 

Unfortunately,  Herbrand’s  Theorem  does  not  hold  for  sequents  of  non-prenex 
formulas  in  Multiplicative  Linear  Logic.  Also  this  result  cannot  be  extended  to 
Additive  Linear  Logic.  Finally,  it  can  be  easily  shown  that  if  the  quantificational 
structure  of  the  induction  formula  is  more  complex  than  a  ^-form,  a  more  complex 
definition  of  functional  interpretation  is  needed. 

We  must  emphasize  that  notational  transparency  is  an  essential  advantage  for 
the  application  of  a  procedure  and  plays  an  essential  role  in  software  design.  In  fact, 
the  mechanization  of  a  procedure  can  certainly  take  care  of  syntactic  details  that  are 
too  boring  for  humans;  but  the  usefulness  of  mechanization  is  much  reduced,  if  the 
procedures  are  very  sensitive  to  accidental  syntactic  features  of  the  formalization 
and  if  the  effect  of  variants  in  the  computation  is  not  transparent  in  the  output 
Proof-nets  fully  exhibit  the  structure  of  deductive  relevance.  In  MLL  the  structure 
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of  relevance  is  fully  transparent  in  the  conclusions.  Therefore  when  the  Herbrand 
terms  are  defined  for  MLL  according  to  our  procedure,  the  history  and  the  role  of 
each  term  is  immediately  clear  from  the  output. 

On  the  other  hand,  the  method  of  proof-nets,  and  especially  the  verification 
of  the  parameters  condition ,  may  be  criticized  as  unintuitive,  when  compared  to 
sequent  calculi.  However,  if  proof-nets  seem  hard  to  read,  it  is  because  they  are 
a  particularly  concise  notation.  Concision  is  an  important  advantage  for  large 
scale  formalizations  and  justifies  efforts  to  “adjust  our  intuition”.  Moreover,  the 
parameters  condition  can  be  replaced  by  a  system  of  f\- boxes  together  with  a  simple 
restriction  on  parameters  (Girard  [1987b]).  Such  a  notation  may  be  regarded  as  a 
system  of  windows  and  is  graphically  suggestive. 

Thus  in  our  application  we  proceed  according  to  the  following  policies. 

•  We  will  formalize  a  proof  of  Infinite  Ramsey  Theorem  (with  exponent  2)  in  the 
fragment  of  first  order  Peano  Arithmetic  in  which  the  Induction  Rule  and  the  Cut 
rule  are  restricted  to  n2-induction  and  Cut  formulas. 

•  Fragments  of  the  proof  without  the  iuductioon  rule  will  be  isolated  and  represented 
as  derivations  in  LK  (with  aritnmetic  axioms). 

•  A  derivation  of  h  T  in  first  order  LK  (with  arithmetic  axioms)  will  be  obtained 
by  introducing  suitable  application  of  Contraction  from  a  derivation  in  first  order 
DL+  of  h  R  (with  arithmetic  axioms),  where  T'  is  classically  equivalent  to  T. 

•  Derivations  in  first  order  DL+  will  be  represented  by  systems  of  proof-nets  with 
non-logical  axioms. 

•  Girard’s  restriction  on  f\-boxes  will  be  used  to  verify  first-order  correctness,  instead 
of  the  parameters  condition. 

•  In  addition,  in  each  proof-net  ^i.e.,  in  each  box)  the  property  will  hold  that  no 
propositional  link  may  occur  below7  any  quantificational  link. 

•  The  Herbrand  Theorem  for  prenex  formulas  of  LD+  is  then  applied  within  each 
box. 

•  For  each  LK  derivation  a  valid  Herbrand  expansions  is  defined  using  if  ... 
then  .  .  .  else  .  .  .  terms. 
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•  Finally  the  NCI  is  defined  for  the  entire  derivation,  in  its  simplest  form,  the 
primitive  functional  interpretation. 

In  the  documentation  below  we  will  present  only 

(1)  the  sequents  formalizing  the  conclusions  of  each  LK  fragment  of  the  derivation; 

(2)  the  sequents  formalizing  the  conclusions  of  each  DL+  fragment; 

(3)  the  corresponding  system  of  proof  nets; 

(4)  the  terms  resulting  from  application  of  the  Herbrand  Theorem; 

(5)  the  functionals  resulting  for  the  application  of  the  NCI. 

The  remaining  steps  of  the  procedure  will  then  be  obvious. 
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11.  Proofs  of  Ramsey’s  Theorems. 

In  the  following  informal  arguments  we  stress  the  structural  similarity  of  the 
proofs  of  the  Infinite  Ramsey  Theorem  (IRT),  the  Finite  Ramsey  Theorem  (FRT) 
and  the  Ramsey-Paris-Harrington  Theorem  (RPH).  We  consider  only  c  =  k  =  2, 
namely,  2-colorings  of  graphs.  It  is  enough  to  work  with  ordered  pairs  (x,  y),  where 
x  <  y.  We  write  r(/)  for  the  Ramsey  function  R( 2, 2,  /)  and  lr(n i )  for  the  Ramsey- 
Paris-Harrington  function  LR( 2, 2,  ni ). 

11.1.  Proof  of  the  Infinite  Ramsey  Theorem. 

As  explained  in  Section  (1.2.1),  we  distinguish  two  parts.  The  first  part  consists 
of  three  steps.  Let  x  '■  [N]2  — >  2  be  given. 

Part  1,  step  l.4  For  i  €  N  define  a  chain  of  subsets  S(i)  of  N  as  follows.  Let 
5(-l)  =  N;  let  Green  (n)  =  {y  :  y(n,y)  =  0),  and  Red  (n)  =  {y  :  x(™,y)  =  1). 
Finally,  let  T°(n)  be  Green  (n)  Pi  5(n  —  1)  and  let  T^n)  be  Red  (n)  fl  5(n  —  1). 

(  S(n  -  1),  if  n  £  S(n  -  1); 

5(n)  =  <  T°(n),  ifn€5(n-l)and|r°(n)|  >  \Tl{n)\-t 

[  T^n)  otherwise. 

By  induction  on  n,  one  can  prove  that  each  S(n)  is  imboimded. 

(*)  Clearly,  each  S(j )  is  a  subset  of  S(i),  for  all  i  <  j. 

Step  2.  Define  the  “diagonal  intersection”  H\  of  the  sets  S(n)  by  course-of- value 
recursion: 

Hi  =  {x  :  Vd  €  H\  D  [xj.x  €  S(d)} 

We  prove  that  H\  is  unbounded.  Suppose  b  is  a  bound  for  H\  and  consider  5(6). 
For  any  element  d  of  H\,  d  <  b  implies  5(6)  C  5(d),  by  (*).  It  follows  that  every 
element  of  5(6)  satisfies  the  definition  of  H\,  i.e.,  5(6)  C  H\.  Thus  5(6)  is  bounded 
by  6,  contradicting  step  1. 

Step  3.  Define  an  induced  coloring  x3tab  :  N  — ►  2  by 

X*to6(n)  —  /  O’  if  n  €  5(n  —  1)  and  T°(n)  is  unbounded; 

\  1,  otherwise. 


4  Steps  1  and  2  are  usually  combined. 


Section  ll 


173 


(**)  Clearly,  x3tab(n )  =  0  V  x3tab{n )  =  1,  for  all  n. 

Finally,  let  U1  =  {x  G  i?i  :  x3tab( x)  =  j}  for  j  =  0, 1.  Define 

H=  /P°.  |C'‘I; 

[  V 1  otherwise. 

Since  H i  is  unbounded  and  x3tab  is  a  2-coloring  of  H) ,  H  must  be  unbounded,  too. 
Part  2.  It  remains  to  verify  that  H  is  ^'homogeneous. 

(*  *  *)  Clearly,  if  x  £  S(n)  then  x{n,x)  =  X3tab{n )  ~  by  the  definitions  of  S(n)  and 

y. stab 

We  nee  1  to  show  that  there  exists  v  such  that  for  all  n,m  G  if  with  n  <  m, 
X(n,m)  =  v\  we  can  choose  v  =  0  if  U°  is  unbounded,  v  =  1  otherwise. 

Suppose  U°  is  unbounded  and  let  n  G  H,  m  €  H  and  n  <  m.  It  follows 
from  the  definition  of  H\  that  m  G  S(n).  By  definition  of  H,  X3tab(n)  =  0,  thus 
h(n,m)  =  0  by  (*  *  *).  Since  n  and  m  are  arbitrary,  we  are  done.  If  U°  is  bounded, 
the  argument  is  similar.  ■ 

11.2.  Proof  of  the  Finite  Ramsey  Theorem. 

Let  n  =  22,_1  —  1.  We  claim  r(l )  <  n.  Let  x  '■  [n]2  — >  2  be  given.  If  we  take 
S(  —  1)  =  [n]  and  we  restrict  all  definitions  to  [n],  then  the  sets  5(z),  H i,  x3tab  and 
H  are  defined  as  in  the  proof  of  IRT. 

Steps  1  and  2  are  combined.  We  need  to  show  that 

\Hi\  >27—1 

and  we  prove,  by  induction  on  p,  that  for  1  <  p  <  2/  -  1,  there  is  qp  <  n  such  that 

\Hin[qp  +  l)\-p  and  |5(gp)|  >  22;-p-1). 

The  computation  is  easy  —  let  qi  be  0  G  H i,  let  qp+i  be  the  least  element  of 
S(qp)  (remember  that  qp  <  inf  S(qp)).  Finadly,  since  |5(g2/-^)|  >  0,  we  can  pick 
921-1  <  n.  In  Step  3,  the  pigeon-hole  principle  is  invoked  to  conclude  that,  since 
l-ffi  |  >  2/  —  1  and  x>tab  is  a  2-coloring  of  H\ ,  we  must  have  \H\  =  l.  ■ 


174 


Section  11 


11.3.  Proofs  of  the  Ramsey-Paris-Harrington  Theorem. 

The  following  is  an  adaptation  of  the  argument  by  Erdos  and  Mills  [1981] 
to  our  context.  Given  n\  we  need  to  find  n2  such  that  for  any  \  :  i ,  t72]2  — *  2 
there  is  a  large  \-homogeneous  H  C  [ni,n2].  Let  r(n)  =  22t>_1  -  1.  Define  It 
by  lr( 0)  =  m  +  1  and  /r(n  +  1)  =  lr(n )  +  r(/r(n)).  We  claim  that  we  can  take 
n2  =  /r(2ni  —  2). 

We  use  the  following  notation.  Let  Green{x)  =  {y  :  \{x,y)  =  0}  and  Red{x )  = 

{ y  ■  x(x,y)  =  !}•  Let 


GO  —bo  ~  n\ 

at+1  =fix.x  £  p|  Green(a})  =  fix.x  >  a,  A  {a0,. .  •  ,a,,x}  is  y-homogeneous  green. 

J<« 

6I+1  =fix.x  £  P  Red(bj)  =  /xx.x  >  b,  A  {60, . . . ,  b„  2}  is  x-homogeneous  red. 

J<« 

Ai+ i  =  {x  :  a0,...,aj,x}  is  y-homogeneous  green,  but  x(a,+j,x)  =  1  [=  red]. 

R,+1  =  {x  :  60l. . .  ,6,,x}  is  y-homogeneous  red,  but  x(&«+i,x)  =  0  [=  green]. 

Finally,  let  C,t}  =  Hk.  Green(ai)  U  Hi<>  R-ed(bi)-  Then 

[ni,n2]  ={ao}  U  C0,o 

=  {a0, a,_i  }  U  {b0, 6,-1 }  U  P  A/  U  P  5/  U  C,j 

i<t  1 < } 


for  1  <  p,  j  <  q,  p  -fi  q  <  2 nj  —  2.  The  picture  is 

a0  =  nj  =  bo 


/ 

G] 

/  \ 

a2  Ai 

/  \ 

A  2 

/ 

\ 


\ 

b  1 

/  \ 

5]  &2 

/  \ 

B2 

\ 

bq 

/ 

Bq 
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We  give  two  variants  of  the  proof. 

Proof  1.  By  induction  on  n,  for  n  <  2n\  —  2,  we  show  that  for  some  i,j  with 
i  +  j  =  n 

(i)  either  for  some  /  <  i,  |A/j  =  r(a/); 

(ii)  or  for  some  l  <  j,  \Bi\  =  r(6/); 

(iii)  or  {a0,  •  •  • ,  a.}  is  ^'-homogeneous  green,  {60, . . . ,  b})  is  ^-homogeneous  red  and 
\Cid\  >  n2  -  lr(n). 

Clearly,  if  (i),  then  either  there  is  a  x-homogeneous  red  set  D  C  At  of  cardinality 
a/,  and  {fl|}UD  is  x-homogeneous  and  large,  or  there  is  a  x-homogeneous  green  set 
D  C  At  of  cardinality  a/,  and  {a0, . . . ,  G/_i }  U  D  is  x-homogeneous  and  certainly 
large.  Similarly,  if  (ii).  Finally,  if  (iii)  with  i  +  j  —  2 nj  —  2,  then  |C,,j|  >  0  and 
either  {a0, . . . ,  a,,  c}  or  {60, . . .  ,6>,  c}  is  x-homogeneous  and  large,  where  c  is  the 
least  element  of  CtJ. 

Proof  2.  Let  S’(ni)  =  [ni,n2|.  For  n  >  n\,  we  define  sets  S(n)  as  follows 


S(n)  = 


(  S(n  -  1), 

Green(n)  f!  S(n  —  1), 


l  Red(n)  fl  S(n  —  1) 


if  n  $  S(n  —  1); 
if  n  €  S(n  —  1)  and 
either  p  =  nj; 

or  p  <  ni,  but  3;.|-Bj|  >  bj  A  n  =  b} ; 
or  p  <  ni,  but  3j.\B}\  >  bj  An  >  £>;- A 

A|  Green(n)  D  S(n  —  1)|  >  | Red.(n)  D  S(n  —  1)|; 
or  q  <  nj,  but  3j.|Aj|  >  a}  A  n  >  a_,  A 

A|Green(n)  H  5(n  —  1)|  >  | Red(n)  fl  S(n  —  1)|; 
otherwise. 


Now  we  define  the  “diagoned  intersection”  H\  as  above  and  show: 

(i)  either  p  =  ri\  and  \H\  \  >  nr, 

(ii)  or  q  =  ni  and  |id]|  >  nr 

(iii)  or  p,  q  <  n\  gmd  \H\  |  >  /  +  2ci,  where  c;  =  ai  or  6/,  l  <  ri\. 

This  replaces  steps  (1)  and  (2)  in  the  proof  of  FRT. 

Step  (3).  We  define  x3<afc(n)  in  accordance  with  the  new  definition  of  S(n). 
We  define  H  as  above.  Then,  arguing  as  in  Proof  1,  we  show  that  \H\  |  =  \H\  >  nj 
if  (i)  or  (2);  if  (iii),  we  show  that  |if|  >  nj  if  nj  €  H  amd  that  \H\  >  c/  if  c/  €  H . 
We  verify  that 

(*  *  *)  if  x  €  S(n)  then  x(n)x)  =  X3,ak(n) 
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with  the  new  definitions  of  S(n)  and  X'stai>-  We  prove  that  H  is  ^-homogeneous  as 
before.  ■ 

11.4.  Remarks  and  Questions. 

Remarks.  ( i )  The  RPH  Theorem,  as  formulated  in  section  (1.2.1),  can  be 
formulated  in  £pa,  but  is  not  provable  in  PA.  The  proof  in  Ketonen  and  Solovay 
[1981]  (see  also  Graham  et  ah  [1980] )  is  a  remarkable  application  of  the  Corollary 
in  Section  (10),  since  it  shows  that  LR(c,  k,n)  dominates  every  fa.  For  any  fixed 
k,  however,  the  result  is  provable  in  PA. 

(it)  Let  k  =  2.  Erdos  and  Mills  [1981]  show'  that  LR(n,2,n)  is  the  Ackermann 
function  /„(n).  In  particular,  a  coloring  x  :  [n,  /c(n)  —  l]2  — ♦  c  is  exhibited  such  that 
every  x-homogeneous  set  has  cardinality  less  than  n.  Namely,  \-(i,y)  is  defined  to 
be  the  least  i  <  c  such  that  for  some  j 

(see  also  Graham  et  al.  [1980],  p.151).  For  a  fixed  c,  however,  LR(c,2,n)  is 
primitive  recursive. 

(in)  The  FRT  and  the  RPH  Theorem  follow  by  a  compactness  argument  from 
the  IRT  -  see  section  (14).  Since  we  consider  only  countable  colorings,  (Weak) 
Konig’s  Lemma  suffices. 

(ii>)  From  (i)  and  (Hi)  it  follows  that  the  IRT  is  not  provable  in  a  conservative 
extension  of  PA.  For  fixed  k ,  the  IRT  is  provable  in  a  conservative  extension  of  PA. 

Notice  that  the  compactness  argument  asserts  the  existence  of  an  n,  for  which 
FRT  holds,  but  does  not  explicitly  give  it  as  a  function  of  c,  k  and  l. 

Question  1:  Can  we  actually  obtain  a  bound  for  the  function  R(c ,  k ,  l )  by  the  func¬ 
tional  interpretation  of  the  compactness  argument  for  the  Finite  Ramsey  Theorem 
from  the  infinite  version? 

Question  2:  The  above  proofs  of  the  Infinite,  the  Finite  and  the  Rarnsey-Pans- 
Earrington  theorems  have  different  conclusions  and  computational  complexities ,  but 
similar  structure.  Can  we  formulate  the  common  features  in  the  form  of  a  more 
general  lemma? 
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12.  Analysis  of  a  First  Order  Proof  of  the  IRT. 


We  postpone  consideration  of  the  compactness  argument  and  of  Question  1  to 
the  section  (14).  We  focus  on  a  formal  proof  of  the  Infinite  Ramsey  Theorem,  and 
we  restrict  ourselves  to  the  proof  of  IRT,  exponent  2.  Moreover,  only  Part  1  of  the 
proof  in  section  (11.1)  is  computationally  significant,  namely,  the  part  in  which  we 
prove  that  the  set  H  is  unbounded. 

Some  parts  of  the  formal  proof  are  given  in  great  detail  in  sections  ( 12.1 )-( 12.2) 
as  examples  of  the  techniques  presented  in  Part  I  of  the  dissertation.  The  reader 
interested  only  in  the  mathematical  results  related  to  Questions  1  and  2  may  omit 
such  details  and  go  directly  to  the  section  (13). 

In  particular,  sections  (12.1.1)  and  (13.3)  and  the  Herbrand’s  analysis  in  section 
(13.3)  may  be  regarded  as  description  of  a  computer-aided  interactive  procedure  of 
formalization  and  transformation  of  proofs.  The  implementation  of  such  a  procedure 
in  a  proof- checker  of  the  type  EKL  is  within  reach  of  the  present  software  technology. 


The  language  is  that  of  first  order  PA  with  additional  predicate  and  func¬ 
tion  symbols  -  namely  \,  X*<ai\  S,  H i,  H.  The  following  table  may  be  useful  in 
comparing  the  proof  of  section  (11.1)  with  its  formalization. 

The  expression . is  formalized  as 


“x  €  S(n)”  . 

“X  :  [N]2  -.2”  .... 

uXstak  :  [N]  -►  2” 

“Green  (n)”  . 

“ Red  (n)” . 

“ Green  (0)  is  bounded"  . 

“ Green  (0)  is  unbounded' 


. 5(n,x) 

•  Vxy.[x(x,y)  =  0  V  x(x,y)  =  1] 
Vx.[x5<o6(x)  =  0  V  x’tab{x)  =  1] 

.  x(n)X)  =  0 

.  x(n>x)  =  1 

36.Vm.[\(0. m)  =  0  D  m  <  b] 
.  .  Ve.3d.[\(0,  d)  =  0  A  d  >  e]. 


The  endsequent  of  our  derivation  is  informally  expressible  as 


“X  :  [N]2  — ►  2,  Definitions  of  S,  x3tabi  an^  H 

h 

H  is  unbounded  and  for  some  l  <  2,  for  all  distinct  n,m  €  H ,  x(n,m)  =  /.  ” 
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We  divide  our  proof  in  two  parts: 

Part  I  (  Unboundedness ) 

“X  '■  [N]2  — +  2,  Definitions  of  S,  xatab >  and  H  H  H  is  unbounded.  ” 

and 


The  proof  of  Part  I  is  divided  into  three  steps. 

The  first  step  yields  the  unboundedness  of  the  stable  sets  S(n).  We  write  a 
formal  derivation  in  E3-IR  5  of 

Part  I,  Step  1 

Vn.def  S(n),  Vnq.x{n,q)  =  0Vx(n,?)  =  1  h  Vn  k.3i.S{n,  i)  A  i  >  k 

Here  def  S{n)  is  the  formal  definition  of  the  sets  S(n ): 

Vi. 5(0,  x)  =“x  €  Green(O)  A  Green(O)  is  unbounded” V 
“x  €  Red(0)  A  Green(O)  is  bounded"; 

Vx.S(n  +  l,x)  =  [->S(n,n  +  1)  A  S(n,x)]V 

[5(n,n  +  1)  A  “x  G  Greexr(n  -f  1)  fl  S( n)A 

A  Green(n  +  1)  fl  5(n)  is  unbounded”]  V 
[S(n,  n  +  1)  A  “x  G  Red(n  +  1)0  S(n)A 

A  Green(n  +  1)0  S(n )  is  bounded.”] 

5  II2TR  is  not  enough  here,  because  the  side  formula  def  S{n)  in  the  antecedent  in 
creases  the  logical  complexity  of  the  sequent  (see  W.Sieg  [1985],  p.40,  footnote  6). 
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Since  in  the  first  part  of  the  proof  only  one  direction  of  the  equivalence  is  used,  we 
may  let  def  S(n)  be 

Vx.[(Ve.3cf.x(0,  d)  =  0  A  d  >  e)  A  x(0,  x)  =  0]  V 

V  [(36.Vm.x(0,m)  =  0  D  m  <  b)  A  x(0,x)  =  1]  D  5(0,  x), 

Vx.[“'5(n,n  +  1)  A  5(n,x)]V 

V  [5(n,  n  +  1)  A  (Ve.3d.5(n,  d)  A  x{n  +  l,d)  =  0  Ad  >  e)A 

A  5(n,x)  A  x(«  +  l,x)  =  0] 

V[S(n,  n  +  1)  A  (36. Vm.5(n,  m)  A  x(^  +  l,m)  =  0  D  m  <  6) A 

A  5(n,x)  A  x(rc  +  l,x)  =  1]  D  5(n  +  l,x). 

The  second  step  yields  the  unboundedness  of  the  diagonal  set  H\ .  We  formalize 
the  argument  of  section  (11.1)  to  provide  a  derivation  6  of 

Part  I,  Step  2 

def  S ,  def  Hi,  Vk3i.S(k,i)  A  i  >  k  h  V6.3c./fi(c)  A  c  >  b 


def  Hi  is  a  course-of- value  inductive  definition  of  the  set  Hi :  'ix.H i(x)  =  (Vd.d  < 
x  A  Hi(d)  D  S(d,  x)).  In  part  1  we  use  only  the  direction 

Vx.  [Vd.d  <  x  A  Hi  (d)  D  S(d,  x)]  D  Hi  (x). 

The  third  step  is  the  proof  of  unboundedness  of  the  homogeneous  set  H .  We 
write  a  formal  derivation  13  of 


6  In  Steps  2  and  3  induction  is  only  used  to  prove  the  facts  (*)  and  (**).  These  are 
II?  lemmas,  thus  they  are  irrelevant  for  the  computation  of  the  bounds,  according  to 
the  Proposition  of  section  (10).  However,  by  the  previous  footnote,  these  inductions  are 
formally  instances  of  the  £3  -  IR. 
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def  E  is  the  explicit  definition  of  the  set  H: 

Vx.if(x)  =  [“x  €  U°  A  U°  is  unbounded”]  V  [“x  E  Ul  A  U°  is  bounded”] 

In  part  1  we  use  only  the  direction 

Vx.  [(VpJg.f^g)  A  xaia\q )  =  0  A  g  >  p)  A  Hx{x)  A  Xs,at(x)]V 

V  [(B r.Vu.Hxiu)  A  XStab(u)  =  0  D  u  <  r)  A  ^(x)  A  X3<a6(x)]  3  if(x) 

The  only  property  of  xstab  relevant  here  is  xstab  '■  [N]  — »  2. 

The  proof  of  Part  I  ( Unboundedness )  is  concluded  as  follows:  first,  Cut  is 
applied  to  Step  1  and  Step  2  with  Cut-formula 

Vfc.3z.5(A:, i)  Ai  >  k 

then  another  Cut  is  applied  to  the  resulting  sequent  and  Step  3,  with  Cut-formula 

V6.3c.ifj(c)  A  c  >  b. 

12.1.  A  Preliminary  Analysis  of  Step  1. 

We  begin  the  construction  of  a  formal  derivation  of  Part  I,  ( Unboundedness). 
We  consider  a  possible  formalization  of  the  proof  of  Step  1,  the  unboundedness  of 
the  sets  S(n).  Write 

Step  10 

Vg.de/  5(g),  “x  :  [N]2  -  2”  L  Vfc.3i.5(0,  *)  A  i  >  k 

for  the  base  case,  and 

Step  i;+1 

Vg.de/  5(g),  “x  :  [N]2  — >  2”,  Vc.3a.5(n,a)  A  a  >  c  I-  Vfc.3i.5(n  +  l,i)  A  *  >  fc 
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for  the  induction  step.  An  informal  argument  for  the  base  case  is  as  follows. 

Suppose  5(0)  to  be  bounded,  in  order  to  find  a  contradiction.  Let  k  be 
such  that  maxS(O)  <  k. 

Part  (1).  Assume  Green( 0)  is  unbounded.  Let  m  be  any  element  of 
Green( 0).  By  the  definition  of  S(0)  and  the  assumption  of  part  (1)  (first 
use  of  the  assumption ),  m  €  5(0)  and  therefore  m  <  k ,  by  the  assumption 
that  k  is  a  bound  for  5(0).  Since  m  is  arbitrary,  we  infer  that  Green(0) 
is  bounded,  contradicting  the  assumption  ( second  use).  We  conclude  that 
Green( 0)  is  bounded. 

Part  (2).  Assume  Green(0)  is  bounded  and  let  e  be  such  a  bound  ( first  use 
of  the  assumption).  Let  t  be  max(e,k).  If  x(0,t)  =  then  t  €  Green(0) 
and  so  t  <  e,  a  contradiction.  If  x(0,f)  =  1,  then  by  the  definition  of 
5(0)  and  by  the  assumption  of  part  (2)  ( second  use)  t  belongs  to  5(0)  and 
therefore  we  obtain  t  <  k,  again  a  contradiction.  Since  in  both  cases  we 
obtain  a  contradiction,  we  conclude  that  the  set  5(0)  itself  is  unbounded. 

We  conclude  the  proof  by  taking  the  conclusion  of  part  ( 1 )  for  the  assump¬ 
tion  of  part  (2)  (Cut).  ■ 

Remarks,  (i)  The  proof  of  the  induction  step  Step  1"+J  is  similar.  Part  (1)  is 
the  same,  with  the  replacement  of  Green(n  +  1)  D  5(n)  for  GVeen(O).  Part  (2)  is  as 
follows: 

(2)  Assume  Green(n  +  l)fl5(n)  is  bounded  and  let  e  be  such  a  bound.  Let 
t  be  max(e,  k).  By  the  induction  hypothesis  5(n)  is  unbounded,  thus  there 
is  an  a  €  5(n)  such  that  a  >  t.  If  x(0,a)  =  then  a  €  Green(n- f  l)fT 5(n) 
and  so  t  <  e,  a  contradiction.  If  x(0,a)  =  then  by  the  definition  of 
5(n  +  1)  and  by  the  assumption  of  Part  (2)  we  obtain  that  a  belongs 
to  5(n  4-  1)  and  therefore  a  <  k,  again  3  contradiction.  Since  in  both 
cases  we  obtain  a  contradiction,  we  conclude  that  the  set  S(n  4- 1)  itself  is 
unbounded. 

The  proof  that  H  is  unbounded  (Step  3)  has  the  same  structure  as  the  proof  of 
Step  Cn. 
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(ii)  The  definition  of  5(0)  and  of  xstab  °f  the  form  if  A  then  B  else  C.  It  seems 
that  an  appropriate  formalization  of  conditional  expressions  in  Linear  Logic  should 
use  additive  conjunction,  e.g.,  it  should  have  the  form  (A  D  B)  n  (-’A  DC).  We  do 
not  pursue  such  an  idea,  since  the  use  of  Direct  Logic  ( multiplicative  interpretation) 
is  much  more  convenient  for  the  purpose  of  the  Herbrand  Theorem  and  of  the  No 
Counterexample  Interpretation. 

(iii)  The  Cut  indicated  at  the  end  of  our  informal  argument  has  the  property  that 
in  both  parts  (1)  and  (2)  the  Cut  formula  “  Green  (0)  is  bounded  ”  results  from  two 
uses  of  an  assumption.  Therefore  this  is  an  example  of  a  Cut  of  the  form 

Si:  T  b  A,  A,  A  S3:  A,  A, II  b  A 
S2:  r  b  A,  A  S4:  A,  lib  A 

S5:  T,nbA,A 


discussed  in  section  (1.1.1). 


H*>«  I  £  p  aai  <  >  4  ir •  arithmetic  aiiomr 


Id  U(D,,Dj,  D,)  be  (3i  0j(i)  A  i  >  k)  v(3.Dj(i)  At  >  *)  v(3iD,(.)  A  •  >  *); 


Figure  3 


(*)'o  c  |(*)a  v  |»  <  p  v (p)s'pe  *a|]  »<»  (la)»p  i»i 


L«t  dt(Dj)  be  -(( 3b  Vm  B(m)  3  m  <  b)  A  C(*)  Z>  Dj(*)) 


Herbr&nd’i  function!’  d^d|cj,  c*^c[6J,  6  b 


(6  '<f  )a«ui  =  t  i»q 


Vpq  A  **•“*(.)  »!*•>  p|  v|H,(,)  A  *"o6| 
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12.1.1.  Analysis  of  Steps  1  and  3. 

We  shall  give  a  different  formed  analysis  of  the  arguments  for  Step  1  and 
for  Step  3.  We  produce  derivations  of  sequents  classically  equivalent  to  Step  10, 
Step  1"+1  and  to  Step  3,  in  Direct  Logic  with  TI2  Cut.  More  precisely,  each  of 
the  proofs  of  Step  lo,  Step  1"+1  and  of  Step  3  can  be  analyzed  in  two  subargu¬ 
ments7:  the  first  subargument  can  be  carried  through  in  Linear  Logic.  The  second 
subargument  cannot  be  formalized  in  Direct  Logic,  but  a  derivation  exists  if  the 
conclusion  is  expanded  by  iteration  of  some  subformulas.  Finally,  the  two  parts  are 
connected  by  Cut,  with  a  Il2-Cut-formula.  In  conclusion,  the  Herbrand  Theorem 
for  Direct  Logic  with  Il2-Cut  can  be  applied  to  the  resulting  derivation. 

The  first  subargument  for  the  base  case  is  a  proof  of 
“if  X  '■  [N]2  — +  2,  then  either  Green  (0)  or  Red  (0)  is  unbounded" ,  i.e., 


Step  O0 

Vnm.^(n,m)  =  0Vx(n,m)  =  l  t~ 

Vp  9.3*  j.(x(0,j)  =  0  A  j  >  p)  V  (x(0,  *)  =  0  A  *  >  q) 


The  argument  for  Step  Oo  is  as  follows. 

Suppose  for  all  m,  x(0,m)  =  0  or  x(0,m)  =  1.  Let  p  and  q  be  arbitrary, 
let  t  =  max(p,  q )  and  take  i  =  t  =  j.  Thus  either  x(0,  t)  =  0  and  t  >  p  or 
x(0,t)  =  1  and  t  >  q,  and  we  are  done.  ■ 

A  proof-net  corresponding  to  a  derivation  of  Step  O0  is  given  in  Figure  1. 


7 


I  found  this  organization  of  the  argument  in  J.Ketonen’s  proof,  mechanized  with  EKL. 
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The  first  subargument  for  the  induction  step  is  a  proof  of 

“»/  x  '  [N]2  — ►  2  and  S(n)  is  unbounded,  then  either  Green  (n  +  1)  fl  S(n)  or  Red 
(n  +  1)  fl  S(n)  is  unbounded ”,  i.e., 


The  argument  for  Step  0”+1  is  as  follows. 

Suppose  for  all  m,  x(n  +  l>m)  =  0  or  x(n  +  l?m)  =  1.  The  induction 
hypothesis  is  that  S(n)  is  unbounded.  Let  p  and  q  be  arbitrary  and  let  t 
=  max(p,  g).  By  the  induction  hypothesis  there  is  an  a  €  S(n )  such  that 
a  >  t.  Thus  either  x(0ia)  =  0  a  >  e,  or  x(0,  a)  =  1  and  a  >  t,  and 
we  are  done.  ■ 

A  proof-net  corresponding  to  a  derivation  of  Step  0"+1  is  given  in  Figure  2. 

The  first  subargument  for  Step  3  is  a  proof  of 
“:/  Xatab  '•  [-Hi]  —*  2,  H\  is  unbounded,  then  either  {z  H\  :  xstab(z )  —  0}  or 
{z  €  Hi  :  x9tab(z )  =  1}  w  unbounded1 i.e., 


The  argument  for  Step  3o  has  the  same  structure  as  that  for  Step  0£+1.  A  proof- 
net  corresponding  to  a  derivation  of  Step  3o  is  given  in  Figure  8. 
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The  abstract  form  of  second  part  is  the  following  Step  (00): 


Step  (00) 

Ve  £3ij.[B(i)  A  i  >  e]  V  [C(j)  A  j  >  £],  Vx.B(x)  V  C(x), 

Vx.[[Ve.3d.I?(d)  A  d  >  e]  A  B(x )]  V  [[36.Vm.5(m)  D  m  <  6]  A  C(x)]  D  D{x), 

h  'ik3i.D{i)  A  i  >  k 


To  obtain  Step  lo  we  replace  x(0,  x)  =  0  for  B(x),  y(0,  x)  =  1  for  C(x)  and  S^O,  x) 
for  D(x)  in  Step  (00). 

To  obtain  Step  l„+i  we  replace  S(n ,  x)  A  x(n  + 1, x)  =  0  for  B(x),  S{n,x )  A  x(rc  + 
1,  x)  =  1  for  C(x)  and  S(n  +  1,  x)  for  D(x).  8 

Finally,  to  obtain  Step  3  we  replace  H\(x)  A  Xata6(x)  =  0  for  B(x),  if'i(x)  A 
X3tab(x)  =  1  for  C(x)  and  H(x)  for  D(x). 

8  More  exactly,  one  needs 

Ve  I3i  )  A  *  >  e)  V  (C(j)  A  j  >  £), 

Vx.[[-i5(n,n  +  1)  A  S(n,x)]V 
V[5(n,n  +  1)  A  (Ve.3 d.B(d)  A  d  >  e)  A  £(x)]V 
V[5(n,n  +  1)  A  (36.Vm.J9(m)  D  m  <  6)  A  (7(x)]]  D  D(x ) 

h 

VJb.3t.D(t)  A  t  >  k 


We  work  with  the  simpler  sequent.  Notice  that  the  two  sequents  have  Herbrand  terms  of 
the  same  form. 
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The  schema  Step  (00)  is  not  provable  in  Linear  Logic.  However,  there  is  a  deriva¬ 
tion  V  in  Direct  Logic  of  the  following 

Step  (000) 

Ve  £3i  j.(B(i)  A  i  >  e)  V  ( C(j )  A  j  >  C).Vx.B(x)  V  C(x), 

Vi.  [[(Ve.Bd.B(d)  A  d  >  e )<2>  A  B(x)]V 

V[(36.Vm.B(m)  3  m  <  b)^  A  C(i)]]  D  D(x) 

Vx.[(36.Vm.B(m)  3  m  <  b)  A  C(x)]  3  D(x) 

Vx.[(Ve.3d.B(d)  A  d  >  e)  A  B(x)]  3  D(x) 

b 

(Vfc.Bi.D(i)  A  z  >  /b)(3) 


Given  a  formula-occurrence  >1  in  a  sequent,  we  use  the  notation 

A ^  =  A  V  ...  V  A  if  the  occurrence  of  A  is  negative; 

n  times 

=  A  A  .  ^ .  A  A  if  the  occurrence  of  A  is  positive. 

n  times 

Thus,  (V6.3m.jE?(m)  Am  ^  b)^  is  here  (Vfe.Bm.B(m)  Am  >  b)  V(V6.3m.B(m)  Am  > 

6),  etc.  Moreover  we  use  the  abbreviations 

df(Di)  for  [[Ve.B d.B(d)  A  d  >  e]2  A  J5(x)]  V  [[3&.Vm.2?(m)  3  m  <  &]2  A  C(x)]  3  £>i(x), 
df  (£>2)  for  [[Ve.3d.B(d)  A  d  >  e]  A  B(x )]  3  £>i(x), 
df(D3)  for  [[3&.Vm.I?(m)  3  m  <  6]  A  C(x)]  3  ^(x). 

A  proof-net  corresponding  to  a  derivation  of  Step  (000)  is  given  in  Figures  3-6. 

The  underlying  informal  argument  is  as  follows. 

(Figure  3)  Assume  df(Di),  df(I?2),  df( D3 )  and  Vx.B(x)VC(x),  and  more¬ 
over  Vp  g.Bi  j.{B(i)  hi  >  p]  V  \C(j)  A  j  >5].  Fix  an  arbitrary  fc,  we  net-J  to 
prove  (3LjDi  (i)Ai  >  fc)V(3i.I?2(i)At  >  k)\/(3i.D3(i)/\i  >  fc).  Take  any  r  > 
fc:  if  Dj(r),  then  we  are  done.  Otherwise,  both  [[Ve.3d.H(d)A(f  >  e]2AB(r)] 
and  [[B6.Vm.i?(m)  3  m  <  &]2  A  C(r)]  must  be  false  and  since  £(r)  V  C(r), 
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it  follows  that  either  \\/e3d.B(d)  A  d  >  e]2  or  [36.Vm..5(m)  D  m  <  6]2  is 
false. 

( Figure  4)  Suppose  that  [36.  Vm.i?(m)  D  m  <  6]2  is  false.  We  use  the 
assumption  df(Z?2)  to  conclude  3i.D2{i)  A  i  >  k.  We  take  fc  for  6,  and 
let  m  be  an  arbitrary  element  such  that  B(m)  D  m  <  k  is  false,  thus 
B(m)  and  m  >  k  hold.  Take  m  for  x  in  df(I>2):  since  the  antecedent  of 
df(D2)[^,]  holds,  so  does  the  consequent  Dz{rn ),  and  this  case  is  finished. 

( Figure  5)  Suppose  that  [Ve.3d.5(6)Ad  >  e]2  is  false.  We  use  the  remaining 
assumptions  d Vx -B(x)  V  C(x)  and  Vp  q3ij.[B(i)  A  i  >  p]  V  [ C(j )  A 
j  >  5]  to  conclude  3i.D3(i)  A  i  >  k  as  follows.  Let  t\  be  such  that 
3d.B(b )  A  d  >  t\  is  false,  and  take  ej  for  p  and  k  for  q.  We  obtain  i  and  j 
such  that  [B(j)Aj  >  ei]v[C(i)Ai  >  k].  But  [B(j)Aj  >  ej ]  is  impossible, 
therefore  C(i )  and  i  >  k.  TjLke  i  for  x  in  df(Z)3):  since  the  antecedent  of 
df(Z?3 )  [*]  holds,  so  does  the  consequent  ^(i),  and  the  proof  is  finished.  ■ 

12.2. 

In 


A  proof-net  corresponding  to  a  derivation  of  the  above  sequent  is  given  in  Figure 
7.  The  underlying  informal  argument  is  as  follows. 

We  have  a  proof  by  III -induction  of 


Analysis  of  Step  2. 
Direc  Logic  we  can  prove 


Vn.dfS(n),  Vx.[Vd.d  <  x  A  H^(d)  3  S(d,  x)]  D  H i(x), 
Vk3i.S(k,  i)  At  >  k  b  V6.3c.ifi(c)  A  c  >  62 


(1)  Vx  y.x  <  y  Z>  V^.[5(x,r)  D  5(y,z)] 

using  only  the  definition  of  S(n).  Now  assume  (2)  Vx.[Vd.d  <  x  A  H\  (d)  D 
S(d,  x)]  D  H i(x)  and  (3)  Vfc.3t.S(fc,i)  A  i  >  k.  For  any  6  there  is  a  c  such 
that  5(6,  c)  and  c  >  6,  by  (3).  If  c  G  #1,  then  we  are  done.  Otherwise, 
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Vd.d  <  c  A  H\(d)  D  S(d,c)  must  be  false,  by  (2).  We  obtain  a  d  <  c  such 
that  Hi(d)  and  not  S(d,c).  But  S(b,c)  and  ->S(d, c)  implies  d  >  b,  by  (1), 
and  the  proof  is  finished.  ■ 

13.  Functional  Interpretation  of  the  IRT. 

In  section  (13.1)  we  give  a  quick  estimation  of  the  complexity  of  the  functional 
interpretation.  Next  we  construct  the  NCI  functionals  dire^  ly  from  the  formal  proof 
described  in  section  (12).  Such  constructions  will  yield  the  proof  of  the  following 
theorem. 

Parametrized  Ramsey  Theorem  (PRT):  There  is  a  functional  F,  primitive 
recursive 9  in  x,  v,  $F  and  Hi,  such  that  for  every  coloring  \  •'  [N]2  — >  [2]  and 
every  choice  ofv, 

(i)  if  v  satisfies  the  (NTC)  and  p  =  F^^(x,v,l),  then  [p]  contains  a 
X-homogeneous  set  of  cardinality  l ; 

(ii )  if  x  satisfies  the  (NTC)[x,  y]  andp0,...pi  €  [x,y],  where  pt  =  F(,)(x,v,p0), 
then  [x,y]  contains  a  x-homogeneous  set  of  cardinality  l. 

Moreover,  for  all  x  and  l,  there  exists  v  satisfying  the  NTC;  in  particular: 

(1)  for  any  fixed  x,  some  v  satisfies  the  NTC  for  all  l; 

(2)  for  any  fixed  l,  there  exist  p  and  v  satisfying  the  NTC[0,p]  for  all  x; 

(3)  for  any  fixed  ri\f  there  exist  n 2  and  v  satisfying  the  NTC[ni,n2]  for  all  x, 
with  l  =  F(x,v,na). 

Corollary  1:  The  Parametrized  Ramsey  Theorem  and  Compactness10  imply  the 
Infinite  Ramsey  Theorem  for  c  =  k  =  2. 

Corollary  2:  The  Parametrized  Ramsey  Theorem  implies  the  Finite  Ramsey  The¬ 
orem  for  c  =  k  =  2. 

Corollary  3:  The  P arametrized  Ramsey  Theorem  implies  the  Erdos-Mills  version 
of  the  Ramsey- Paris- Harrington  Theorem  for  c  =  k  =  2. 

9  In  fact,  F  is  in  £i{x,  Sf ,  Hi  ,v),  the  third  class  in  the  Grzegorczyk  hierarchy  rela¬ 
tivized  to  x,  v,  Sr  and  H\ . 

10  Since  we  consider  only  countable  colorings,  when  we  speak  of  “Compactness”  we 
mean  an  application  of  (Weak)  Konig’s  Lemma. 
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13.1.  Estimation  of  the  complexity. 

Let  “de/’  S(n )”  be  the  Skolemization  of  the  definition  of  S(n )  in  Step  1  and 
“ def ’  xstab”  be  the  Skolemization  of  the  definition  of  x9tab  in  Step  3.  11  Assume  we 
have  a  formal  derivation  of  Part  1,  using  def ’  S(n )  and  def’  x stab ■  now  every  appli¬ 
cation  of  the  induction  rule  is  an  instance  of  II^-IR.  The  new  derivation  contains 
only  one  application  of  IljjTR  relevant  to  the  complexity  of  the  functionals.  Let  v 
be  the  set  of  Skolem  functions  in  question.  By  applying  the  Corollary  in  section 
10.7,  we  conclude 

Proposition.  The  functional  F  such  that 

T  h  Vj.H(F(j))  A  F(j)  >  j, 

obtained  from  the  interpretation  of  the  derivation  of  part  1,  is  in  Ti,  where  T  is 
{x,S,Hi,H,v},  namely  the  third  class  of  Grzegorczyk’s  hierarchy  relativized  to  T. 

■ 

Remark.  In  Section  (13.5)  we  show  that  given  \  '•  [N]2  — ►  2,  by  iteration  of 
F  we  can  generate  a  y-homogenerous  set  Hi ^  of  cardinality  l  for  certain  choices 
of  the  parameters  and  a  large  x-homogeneous  set  for  other  choices.  We 

also  show  that  H IP  and  ifl"1’"2'  are  bounded  by  the  usual  functions  i2(2,2,/)  and 
Xi2(2,2,n1),  respectively,  for  any  x- 

By  using  auxiliary  colorings  12  we  may  obtain  a  proof  of  the  IRT  with  exponent 
k  =  2  and  an  arbitrary  number  c  of  colors,  and  then  construct  a  functional  Fc  which 
will  be  in  F'c+2,  for  an  appropriate  set  T'  of  parameters.  Then  x-homogeneous  sets 
of  given  cardinality  and  large  x-homogeneous  sets  can  be  obtained  by  iteration  of 
Fc,  for  arbitrary  c  and  x  :  [N]2  — ♦  c  and  for  appropriate  choices  of  parameters.  Now 
R(c,  2,  /)  is  primitive  recursive  but  LF(c,  2,  c)  is  the  Ackermann  function.  It  is  clear 
that  the  computational  complexity  of  and  ultimately  depends  on  the 

parameters. 

11  Notice  that  a  Skolem  function  for  a  formula  becomes  a  Herbrand  function,  when  the 
formula  is  written  in  the  antecedent  of  a  sequent. 

12  Let  x  :  [N]2  — ♦  c  for  some  c.  Define  auxiliary  colorings  x>  for  »  <  c  by  letting 
Xi(x,y)  =  0  if  x(x^y)  =  *  -  1,  Xi(x,y)  =  1  otherwise.  Then  Part  1  of  the  proof  of  the  IRT, 
with  exponent  k  =  2  and  c  +  1  colors,  can  be  obtained  by  repeating  c  times  Part  1  of  the 
proof  of  the  IRT.  By  the  argument  for  the  Proposition,  we  can  construct  a  derivation  with 
only  c  significant  applications  of  the  II2-IR. 
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13.2.  Functional  Interpretation,  Preliminaries. 

We  apply  the  Herbrand  Theorem  for  Direct  Logic  with  Il2-cut  to  the  proof-nets 
considered  in  sections  (12.1.1)  and  (12.2).  The  result  provides  optimal  Herbrand’s 
forms  for  the  provable  sequents  Step  1  -  Step  3  (section  12).  Next,  we  define  the 
functionals  and  produce  the  interpretations  Step  If  -  Step  3 F.  By  the  correctness 
of  the  NCI  we  know  that  for  any  choice  of  numerical  functions  for  the  parameters, 
the  functionals  yield  values  making  the  sequents  true.  13  It  is  reasonable  to  assume 
the  following 

Convention.  The  interpretations  of  the  predicate  letters  S(n ,  y),  H i(x),  H(x )  and 
of  the  function  letter  x3tab(x)  are  sets  Sp(n),  HiF,  HF  and  a  function  f£ab  such 
that  the  sentences  def  SF,  def  H1F  and  def  HF  in  the  sequents  Step  If  -  Step 
3f  are  true.  14 

13.3.  Herbrand’s  Analysis  of  Step  I. 

By  applying  Herbrand’s  Theorem  (section  10.2)  to  the  proof-net  in  figure  1  we 
obtain  Herbrand’s  functions  p,  q  and  a  term  to  =  max( p,  q). 


Herbrand’s  expansion  of  Step  O0 

x(0,to)  =  0  V  x(0,to)  =  1  b 

(X(0,t0)  =  0  A  t0  >  p)  V  (x(0,t0)  =  1  A  t0  >  q) 

13  We  may  assume  x  :  [N]2  — ►  2  to  be  true;  we  may  restrict  ourselves  to  terms  x(x,y) 
where  x  <  y.  These  assumptions  are  part  of  the  data  of  our  problem:  there  is  no  point 
here  in  considering  deviant  interpretations  of  those  symbols. 

14  This  last  condition  would  be  guaranteed  if  we  used  the  comprehension  axiom  in  second 
order  logic  to  define  the  sets  S(n),  H\  and  H,  instead  of  introducing  additional  predicates. 
Consider,  for  instance,  the  base  case  Step  10  in  the  argument  by  induction  that  proves 
Step  1: 

Vp.x(0,p)  =  0  V  x(0,p)  =1  b  Vfc.Bi.1  €  {x  :  0(x)}  A  i  >  k. 

For  some  9,  F  and  some  jo,  the  interpretation  is 

x(0,0  =  0  V  x(0,0  =  1  b  Vj <>„(/>  €  {x:6JF{x)}  AI,  >  k) 

and,  by  the  correctness  of  the  interpretation,  U><^0{x  :  0;>(x)}  ’s  nonempty  (assuming 
x(o,t)  =  0  V  x(0,t)  =  1). 
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Similarly,  from  the  proof-net  in  figure  2  we  obtain  Herbrand’s  functions  p,  q  and 
a[c]  and  terms  to  =  max(p,q)  and  ao  =  a[to]. 

Herbrand’s  expansion  of  Step  0£+1 

X(n  -|-  l,a0)  =  0  V  x(n  +  l,a0)  =  l,S(n,a0)  A  a0  >  t0, 

h 

[S(n,a0)  A  x(n  +  l,a0)  A  a0  >  p]  V  [5(n,a0)  A  x(n  +  l,a0)  A  a0  >  q]. 


Consider  now  figure  3.  The  formulas  in  the  conclusion  are  not  prenex,  and  we 
must  use  the  Theorem  in  section  (10.2.1).  Therefore  we  regard  boxes  2,  3  and  4  as 
resulting  from  boxes  with  prenex  conclusions  by  substitution  of  suitable  formulas 
for  the  atomic  formulas  (the  conclusions  of  Box  1  are  in  prenex  form).  In  addition, 
it  is  convenient  to  fix  the  k  in  the  conclusion  of  Box  4  —  we  may  take  k  to  be 
a  new  constant  k  of  the  language  £',  coinciding  with  the  corresponding  Herbrand 
function.  With  this  preparation,  the  following  proof-structure  (Box  4’)  yields  the 
remaining  part  of  Box  4  (figure  3),  after  indicated  replacements.  Here  we  take  r  >  k 
as  an  arithmetic  axiom. 
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Box  3. 


-Df3l 


V2 


-W 


Uz 


Box  2. 


Z2 


Df2 


’B(r) 


’C(r) 


Y2 


B(r) 


Z2 


C(r) 


~'B(r)  A  —i C(t) 
iVx.(B(x)  V  C(x)) 


Y2  A  B(r)  Z2  A  C(r) 

[Y2  A  B(r)]  V  [Z2  A  C(r)] 


’Bi(r) 


t/2 


[Y2  A  B(r)]  V  [Z2  A  C(r)]  A  -£>i  (r) 
->Vx.[Y2  A  B(*)]  V  [Z2  A  C(*)]  3  A  (x) 


D\  (r)  r  >  k 
D\  (r)  A  r  >  A: 
3*.  [A  (*)  A  «  >  A] 


[Ve.3d.B(d)  Ad  >  e] 

Replacements: 

Y, 

[3fe.Vm.B(m)  3  m  <  6] 

2, 

Vx.  [(36.  Vm.B(m)  3  m  <  6)  aC(x)  3  D3(x)] 

Df3, 

Vx.[[Ve.3d.B(d)  A  d  >  e]  A  B(x)]  3  b2(x)] 

Df2, 

Ve/.3ij.[B(«)  A »  >  e]  V  [C(j)  A  j  >  (\ 

VY, 

3i.£>3 (»)  A  i  >  k 

A, 

3i.£>2(»)  A  t  >  k 

A, 

Box  4’. 
Figure  9. 


z 


r 

i -  i 

-nB(mi)  m,<i  Y  B(m:) 

B{mi)  J  m\  <  k  Y  A  B(mi )  ->£>2(^1)  P2(wi)  tt^  >  k 

— >[[V  A  D  Di(mi)]  D2(mi)Ami 

-.V*.[[YaB(*)]  3  Z>i (*)]  3«.P2(i)A«>  fc 


Vm.B(tn)  D  m  <  Jfc  Z  -|Vx.[[Y  A  £(*)]  3  £>1  (*)]  3i.£>2(«)  A  1  >  /: 

3 b.Vm.B(m)  3  m  <  6 

Replacements: 

[Ve.3<f..B(cf)Ad  >  e]  Y, 

[36.Vm.B(m)  3  m  <  fc]  Z, 

Box  2’. 

Figure  10. 
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A  similar  treatment  yields  Box  3  (figure  5)  from  Box  3’. 


-i3ij.[5(‘)  A  »  >  ei]  V  (C(j')  Aj  >  i)  -«Vz.Z  A  C(x)  0  D$(x),  3i.D3(i)  A  i  >  k,  Y 

->Ve.3ij.[B(i)  A  i  >  e]  V  [C(j)  A  j  >  k]  3 d.B(d)  A  d  >  e\ 

~ >Ve(3ij.[B(i )  A  i  >  c]  V  [C(j)  A  j  >  (\ 


-iVe£3 ij.[B{i)  A  t  >  e]  V  [C(j)  A  j  >  (],  Ve.3d.B(d)  A  d  >  e 

-Nx.Z  A  C(z)  D  D3(x),  3i.D3(i)  At  >  k,  Y 

Box  3’. 

Figure  1] . 
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The  Herbrand  form  of  Step  (000)  is 

Step  (000)w 

Ve  t(B(i[eJ})  A  iM  >  e)  V  (C{j[e,£\)  A  j[e,C]  >  £), 

Vx.B(x)  V  C(x), 

Vx.  [[(3 d.B(d)  A  d  >  e[x])(2)  A  B{x))  V 

[(36.jB(m[i,  6])  D  m[i,  6]  <  £>)(2)  A  C(x))]  D  D\{x) 

\/x.[(3d.B(d)  A  d  >  e[x])  A  -B(x)]  D  D2{x) 

Vx.[(36.i?(m[x,  6])  D  m[x,6]  <  b)  A  C(x)j  D  Dz(x) 

h 

3i.Di(t)  A  i  >  k,3i.D2(i)  A  i  >  k,  3 i.D3(i)  A  i  >  k 

From  the  Herbrand  analysis  of  Box  4’  we  obtain  terms  k  and  r  and  the  proof- 
structure  shown  in  figure  12.  We  assume  r  >  k. 
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Herbrand’s  analysis  of  Box  3. 

->Df3l  Y2  -*W  U3 


->B(r)  ->C(r)  Y2  B(r)  Z2  C(r) 

-.(B(r)  v  C( r)  V2  A  B(r)  Z2  a  C(r) 


[Y2  A  B(r)]  v  [Z2  A  C(r)]  -^(r)  Di(r)  r>k 

[Y2  A  B(r)]  V  [Z2  A  C(r)]  A  -Dj  (r)  £),  (r)  A  r  >  k 

Herbrand’s  analysis  of  Box  4’. 

Figure  12. 

From  the  Herbrand  analysis  of  Box  4’  we  also  infer  that  the  Herbrand  terms  for 
the  eigenvariables  mj  and  m2  occurring  within  Box  2  are  of  the  form  m[r,  x],  and 
that  the  Herbrand  terms  for  the  eigenvariables  e\  and  e3  occurring  within  Box  3 
axe  of  the  form  e[r].  In  other  words,  we  can  specify  the  choice  of  Herbrand’s  term 
for  Step  (000) H: 
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Ve  £.(B( iM)  A  i[e, i\  >  e)  V  (C(jM)  A  j[c,f]  >  £), 
B(r)VC(r), 

[[(3d.£(d)  Ad>  e[r])(2)  AB(r)]V 

[(36.5(m[r, 6])  3  m[r,  b\  <  6)(2)  A  C(r)]]  3  D\ (r) 

\/x.[(3d.B(d)  A  d  >  e[x])  A  B(x)]  3  D2(x) 

Vx.[(36.B(m[x, 6])  3  m[x, b]  <  b)  A  C(x)]  3  -D3(x) 

h 

Di(r)  A  r  >  k,  3i.D2(i)  A  i  >  k,  3i.Dz(i)  A  i  >  k 


From  the  Herbrand  analysis  of  Box  2’  we  obtain  terms 

mi  =  m[r,k] 

e2  =  e[mi]  m2  =  m[r,e2]. 

and  the  proof-structure  shown  in  figure  13. 

Herbrand’s  analysis  of  Box  1. 

Z  Y 

_ r 

->B( mi )  mi  <  k 

B(mt)  0  mi  <  k 

Herbrand’s  analysis  of  Box  2’. 

Figure  13. 


Y  B(mj)  | 

(y)AB(mj)  iD:(mi)  £>2(1111)  mi  >  k 

-■[[y  A  B(mi)]  D  £>i(mi)]  £>2(mi)Ami  >k 


In  figure  13  the  Herbrand  analysis  of  Box  1  is 
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B(m2) 


m2  >  e2 


B(m2)  A  m2  >  e2 


^B( m2)  m2  <  e2 
B{ m2)  D  m3  <  e2 


We  obtain  a  further  specification  of  the  choice  of  Herbrand’s  term  for  Step  (000) 


Ve  L(B{ iM)  A  i[e,  £]  >  e)  V  (C(JM)  A  j[e,£)  >  £), 

Vx.B(x)  V  C(x), 

[[(3 d.B(d)  A  d  >  e[r])<2>  A  B( r)]V 
[(^(m!)  D  mi  <  k)  A  (B( m2)  D  m2  <  e2)  A  C(r)]]  D  Pi(r) 

[(B(m2)  A  m2  >  e2)  A  ^(mn])]  D  £>2(1*11) 

Vx.[(36.i?(m[:r,6])  D  m[i,fe]  <  6)  A  C(x)]  D  D3(x) 

I- 

£>i(r)Ar>k,  JD2(mi)Ami  >k,  3i.D3(i)  A  i  >  k 


From  the  Herbrand  analysis  of  Box  3’  we  obtain  terms 
d  =  e[r] 

ii  =i[ei,k]  ji  =  j[ej,k] 

e3  =  e[r]  m3  =  m[ji,e3]. 


and  the  proof-structure  shown  in  figure  14. 
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9 


* 


Herbrand’s  analysis  of  Box  1. 


Z  Y 


z  C(jO 

ZAC(h)  -A>C  ji) 

D3(  ji)  Ji>k 

-[ZAC(ji)  DZ?3(ji)] 

£>3(jl)  Aji  >  k 

“'C-’(ji)  ->ji  >  k 

B(ij )  A  ii  >  ej 

-■[B(ii )  A  ii  >  ei] 

)  A  ji  >  k] 

->[[B(ii)  A  ii  >  ei] 

"O 

> 

IV 

Herbrand’s  analysis  of  Box  3’. 
Figure  14. 


In  figure  14  the  Herbrand  analysis  of  Box  1  is 


B( m3)  m3  >  e3 


->B(m3)  m3  <  e3 


B(m3)  A  m3  >  e3 


B(m3)  0  m3  <  e3 


* 
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The  choice  of  Herbrand's  term  for  Step  (000) H  is  now  completed: 


13.3.1.  Herbrand’s  Analysis  of  otep  I,  Cut. 

In  order  to  obtain  the  Herbrand  expansion  of  Step  10,  substitute  e[r]  for  p 
and  k  for  q  in  the  Herbrand  expansion  for  Step  O0  and  in  its  proof-net. 

Herbrand’s  expansion  of  Step  O0  [J*  ]  [£] 

x(0,t)  =  0  V  x(0,t)  =  1  h  (x(0,  t)  =  0  A  t  >  ei)  V  (x(0,t)  =  1  A  t  >  k) 

where  ei  =  e[r],  t  =  max(ei,k) 

Replace  x(0,  x)  =  0  for  B(x),  x(0,  x)  =  1  for  C(x)  and  5(0.  x)  for  D i  (x),  D2{x)  and 
Z?3 (x )  and  substitute  mox(x,  y)  for  both  i[x,  y]  and  j[x, y]  in  the  Herbrand  expansion 
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of  Step  (000)  and  in  its  proof-net.  We  obtain  terms 

k,  r, 


ei  =e[r], 

mi  = 

m[r,k], 

f 

t 

=  max(e j .  k) 

e2  =  e[mj] 

m2  = 

m[r,e2] 

e3  =  e[r] 

m3  = 

m[t,e3] 

and  the  following  expression.  We  may  let  r  be  k. 


(x(0,  t)  =  0  A  t  >  ej)  V(*(0,t)  =  1  At  >  k), 

X'(0,r)  =  0  V  \'(0,  r)  =  1, 

[[(x(0,m3)  =  0  A  m3  >  e3])  A  (x(0,t)  =  0  A  t  >  e: )  A  \(0,r)  =  0] V 
[(x(0,m2)  =  0  D  m2  <  e2)  A  (x(0,mi)  =  0  D  nij  <  k)  A  x(0,r)  =  1]]  D 

D5(0,r) 

[(x(0,m2)  =  0  A  m2  >  e2)  A  x(0,m!])  =  0]  D  5(0,  mj) 

Vx.[(x(0,m3)  =  0  D  m3  <  e3)  A  x(0,t)  =  1]  D  5(0,  t) 

b 

5(0,r)Ar>k,  5(0,  mi)  A  mj  >  k,  5(0,  t)  A  t  >  k 
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By  applying  Cut  with  Cut  formula 

(X(0,t)  =  0  A  t  >  ei)  V  (x(0, t)  =  1  A  t  >  k), 
we  obtain  a  proof-net  writh  conclusion 


Herbrand’s  expansion  of  Step 

lo 

x(0,t)  =  o  V 

X(0,t)  =  l  x(0,r)  =  0V 

X(0,r)  =  1, 

[[(X(0,m3)  = 

0  A  m3  >  e3j)  A  (x(0,t)  = 

=  0  A  t  >  e3 

)  A  x(0,r)  =  0]V 

[(x(0,m2) 

=  0  D  m2  <  e2)  A  (x(0, mi)  =  0  D  m 

i  <  k)  A  x(0,r)  =  1]]  D 

C>  5(0,  r) 

[(x(0,m2)  = 

0  A  m2  >  e2)  A  x(0,mi])  = 

=  0]  d  5(0, 

mi) 

Vx.[(x(0,m3) 

=  0  D  m3  <  e3)  A  x(0,t) 

=  1]  D  5(0 

t) 

h 

S(0,r) A  r  > 

k,  S(0,  mi)  A  mi  >  k, 

5(0,  t)  At 

>  k 

The  Herbrand  analysis  of  Step  10  is  finished. 

In  order  to  obtain  the  Herbrand  expansion  of  Step  1"+1,  substitute  e[r]  for  p 
and  k  for  q  in  the  Herbrand  expansion  for  Step  0^+i  and  in  its  proof-net. 

Herbrand’s  expansion  of  Step  0"+1  [^]  [£] 

X(n  +  l,aj)  =  0  V  x(n  +  l,ai)  =  l,5(n,ax)  A  ax  >  t, 

b 

[S(n, ai)  A  x(n  +  l,ai)  =  0  A  ai  >  ei]  V  [5(n, ai)  A  x(n  +  l,ai)  =  1  A  ai  >  k] 
where  ei  =  e[r],  t  =  raax(ei,k)  and  aj  =  a[t]. 
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Replace  S(n,x )  A  x(«  -f  l,x)  =  0  for  B(x),  S(n,x )  A  x(«  +  l,x)  =  1  for  C(x)  and 
5(n  +  l,x)  for  Di(x),  £>2(1)  and  D3(x)  and  substitute  a[mai(i,y)]  for  both  i[x,t/] 
and  j[x,  y ]  in  the  Herbrand  expansion  of  Step  (000)  and  in  its  proof-net.  We  obtain 
terms 

k,  r, 

ei  =e[r],  mj  =  m[r,k], 

t  =  max(ei,k)  aj  -  a[t] 

e2  =  e[mi]  m2  =  m[r,e2]. 

e3  =  e[r]  m3  =  m[ai,e3], 

and  the  following  expression.  We  may  take  ai  for  r. 

[5(n,  ai)  A  x(™  +  l,ai)  =  0  A  ai  >  ei]V 
V[5(n,  ai )  A  x(n  +  1,  ai )  =  1  A  ai  >  k], 

S(n,  r)  A  x(n  +  l,r)  =  0  V  5(n,r)  A  x(n  +  l,r)  =  1, 

[[S(n,  m3)  A  x(n  +  1,  m3)  =  0  A  m3  >  e3]  A 
A[5(n,ai)  A  x(«  +  l,aj)  =  0  A  ai  >  ei]A 

S(n,r)  A  x(n  +  l,r)  =  0]V 

V[S(n,  m2)  A  x(”  +  1,  m2)  =  0  D  m2  <  e2]  A 
A[5(n,  mi)  A  x(”  +  1,  mi  =  0  D  m:  <  k]A 

AS(n,r)Ax(n  +  l,r)  =  l]]  D%  +  l,r) 

[(5(n,  m2)  A  x(«  +  1,  m2)  =  0  A  m2  >  e2)A 

A5(n,mi)  A  x(n  +  1,  mx)  =  0]  D  S(n  +  1,  mi) 

Vx.[(S(n,  m3)  A  x(n  +  1,  m3)  =  0  D  m3  <  e3)A 

AS(n,ai)  A  x(n  +  l,ai)  -  1]  D  S(n  +  l,ai) 

H 

5(n  +  l,r)  A  r  >  k,  S(n+l,ml)Am1  >k,  S(n  +  1,  ai )  A  ai  >  k 
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By  applying  Cut  with  Cut  formula 

(X(0,t)  =  0  A  t  >  ej)  V  (x(0,t)  =  1  A  t  >  k), 
we  obtain  a  proof-net  with  conclusion 

Herbrand’s  expansion  of  Step  1"+1 

X(n  +  l,ai)  =  0  V  x(n  +  l,ai)  =  1,  S(n,  ai )  A  aj  >  t, 

S(n,r)  A  x(n  +  l,r)  =  0  V  S(n,  r)  A  x(n  +  l,r)  =  1, 

[[5(n,  m3)  A  x(n  +  1,  m3)  =  0  A  m3  >  e3]A 
A[5(n,ai)  A  x(n  +  l,ai)  =  0  A  aj  >  ej]A 

S(n,r)  A  x(n  +  l,r)  =  0]V 

V[S(n,  m2)  A  x(«  +  1,  m2)  =  0  3  m2  <  e2]A 
A[5(n,  mi)  A  x(n  +  1,  mi  =  0  3  mi  <  k]A 

5(n,r)Ax(n  +  l,r)  =  lj]  3S(n  +  l,r) 

[(S(n,  m2)  A  x(«  +  1,  m2)  =  0  A  m2  >  e2)A 

A5(n,mi)  A  x(«  +  l,mi)  =  0]  3  S{n  +  l,mi) 

Vx.[(5(n,  m3)  A  x(n  +  1,  m3)  =  0  3  m3  <  e3)A 

/\S(n,  ai)  A  x(«  +  l,ai)  =  1]  3  S(n  +  l,ai) 

b 

S(n  +  1,  r)  A  r  >  k,  S(n  -f  1,  mx)  A  mi  >  k,  5(n  +  1,  ai )  A  ai  >  k 

The  Herbrand  analysis  of  Step  l£+1  is  finished. 

A  similar  procedure  yields  the  Herbrand  expansion  of  Step  3. 


Section  13 


213 


13.4.  Herbrand’s  Analysis  of  Step  2. 

A  straightforward  application  of  Herbrand’s  Theorem  in  section  (10.2)  to  figure 
7  yields  Herbrand’s  functions  d[c],  c[6]  and  b,  terms 

c0  =  c[b]  d0  [c0] 

and  a  proof-net  with  the  following  conclusion. 

Herbrand’s  analysis  of  Step  2. 

[d0  <  c0  A  ifi(do)  D  S(d0,c0)]  D  #i(c0), 

5(b,c0)  A  c0  >  b 

h 

H1(d0)  A  d0  >  b)  V  Hi(c0)  A  c0  >  b 


13.4.1.  Functional  Interpretation  of  Step  1. 

We  have  exhibited  in  great  detail  the  construction  of  proof-nets  with  conclu¬ 
sions  the  interpretations  in  Direct  Logic  of  Step  lo,  Step  1”+1  and  of  Step  2. 


Step  lo,  Direct  Logic 

Vn  m.x(n,m)  =  0  V  x(rc,m)  =  1, 

Vi.  [[(Ve.3d.x(0,  d)  —  0  A  d  >  e)  A  (Ve.3d.x(0,  d)  =  0  A  d  >  e)  A  x(0,  x)  =  0]  V 
V[(36.Vm.x(0,  m)  =  0  D  m  <  b)  A  (3b.Vm.x(0,  m)  =  0  D  m  <  b) A 

Ax(0,x)  =  1]]  D  5(0, x) 

Vx.[(36.Vm.x(0, m)  =  0  D  m  <  b)  A  x(0,x)  =  1]  D  5(0,  x) 

Vx.[(Ve.3d.x(0,  d)  =  0  A  d  >  e)  A  x(0,  x)  =  0]  D  5(0,  x) 

h 

\/k.(3t.S(0,i)  At  >  k)\/  (3t.5(0,z)  A  i  >  k)  V  (3i.5(0,t)  A  i  >  k) 
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Step  l”+i,  Direct  Logic 

Vn  9-x(n,g)  =  0Vx(n,«)  =  l,Vn  q.x(n,q)  =  0  V^n.j)  =  1, 

Vc.3a.[5(n,a)  A  a  >  c]  A  [S(n,a)  A  a  >  c] 

Vx.  [[(Ve.3d.S(n,  d)  A  x(n  +  l,d)  =  0  A  d  >  e)A 
A(Ve.3<i.S(n,  <0  A  x(n  +  1,<0  =  0  A  d  >  e)A 
A5(n,x)  A  x(«  +  l,x)  =  0] V 
V[(36.Vm.5(n,  m)  A  x(n  +  =  0  D  m  <  b) A 

(3 6.Vm.5(n,m)  A  x(n  +  l,m)  =  0  D  m  <  b) 

A S(n,x)  A  x(n  +  l,x)  =  l]] 

D  5(n  +  l,x) 

Vx.[(3b.Vrn.S(n,m')  A  x(n  +  l,m)  =  0  D  m  <  6)A 
AS(n,  x)  A  x(n  +  l,x)  =  l]  3 
^  S(n  -f  1,  x) 

Vx.[(Ve.3d.S(n,  d)  A  x(n  +  1,  d)  =  0  A  <i  >  e)A 
A5(n,  i)  A  x(«  +  1,  x)  =  0]  D 
3  S(n  +  l,x) 

h 

Vfc.(3*.5(n  +  l,i)  A*  >  fc)V 
V(3i.S(n  +  1,0  A  i  >  fc)V 
V(3z. S(n  +  1,0  A  i  >  k ) 
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We  can  define  functionals  for  these  sequents  simply  by  reading  off  their  values 
from  the  corresponding  sequents  in  sections  (13.3.1)  and  (13.4).  For  instance,  for 
Step  lo  we  have: 

Herbrand’s  form  of  Step  lo,  Direct  Logic 

Vn  m.x(n,  m)  =  0  V  x(n,  m)  =  1, 

Vi.  [[(3d-x(0,  d)  =  0  A  d  >  e[i])A 

A(3d-x(0,  d)  =  0  A  d  >  e[x])  A  x(0,  x)  =  0] V 
V[(36.x(0,m[x,6])  =  0D  m[x,i>]  <  b)f\ 

A(36-x(0,  m[x,  b])  =  0  D  m[x,  6]  <  b)  A  x(0,  x)  =  1]]  D 

J  5(0,  x) 

Vx.[(3d.x(0,d)  =  0  A  d  >  e[xj)  A  x(0'x)  =  0]  D  5(0,  x) 

Vx.[(36.x(0,  m[x,  b])  =  0  D  m[x,6]  <  b)  A  x(0,x)  =  1]  D  S(Q,x)hfill 


(3i.5(0,  *)  A  i  >  k)  V  (3z.5(0,  i)  A  z  >  k)  V  (3z.5(0,  i)  A  i  >  k) 
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Functional  form  of  Step  lo,  Direct  Logic 

x(Nq,Mo)  =  0  V  x(N0,M0)  =  1, 

[l(x(0,Di)  =  0AD1  >e[Xi])A 

A(x(0,  D2)  =  0  A  D2  >  e[A'i])  A  x(0,  Xx )  =  0]  V 
V[(x(0,m[Xi,Si])  =  0  D  <  BX)A 

(x(0MXuB2\)  =  o  D  m[XuB2]  <  B2)  A  x(0,^i)  =  1]]  D 
DS(  0,Xx) 

[(x(O,D3)  =  0AD3>e[X2])AX(O,X2)  =  0]DS(0,X2) 

[(x(0,m[A r3,53J)  =  0  D  m [X3,B3]  <  B3)  A  x(0,X3)  =  1]  D  S(0,X3)hfiU 

h 

(S(0,h)  A  h  >  k)  V(5(0,/2)a72  >k)  v(S(0,J3)A/3  >  k) 


where 


No 

=  0 

Mo 

A'i 

=  r  =  k 

=  D(m,e,  k)  =  m3 

d2 

Bi 

=  B(m,e,k)  =  e3 

b2 

*2 

=  A(e,  k)  =  t 

d3 

A'3 

=  A'(m,k)  =  mi 

b3 

A  : 

=  /( k)  =  r 

h  ■■ 

A  : 

=  J(e,  k)  =t 

:  M(e,  k)  =  t 

:  D(e,  k)  =  t 
B(k)  =  k 
:  Z?(m,e,k)  =  e2 
:  B(e,k)  =  e3 
/(m,  k)  =  mi 

> 
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We  obtain  functionals  for  Step  lo  by  using  if  .  .  .then .  .  .  else .  .  .  expressions 
as  follows. 


D4  =  D(m,e,k)  =  if  (x(0,  D\ )  =  0  A  D\  >  e[A'i]), 

then  D\ , 
else  D2; 

B4  =  B( m,e,k)  =  if  (x(0,  m[A'i ,  B\])  =  0  D  m[A'i ,  B\]  <  B\ ), 

then  B\ , 
else  B 2; 

Do  =  D(m,e,  k)  =  if  (x(0,  D4)  =  0  A  D4  >  e[A'i])v 

v(x(0,m[A'1,B4])  =  0  D  m[A',,B4]  <  B4), 

then  D4, 
else  D3; 

B0  =  B(m,e,k)  =  if  (x(0,  D4 )  =  0  A  D4  >  e[A'i])V 

v{x(0,  m[A'i,  B4])  =  0  D  m[A'i,B4]  <  B4), 

then  B4, 
else  B3; 

X0  =  A(m,e,k)  =  if  (x(0,  D4)  =  0  A  D4  >  e[X:])v 

v(x(0,m[Ai,B4])  =  00  m[A'i,B4)  <  B4), 

then  Aj , 

else  if  [(x(0,  D3)  =  0  A  D3  >  e[A'2])  A  x(0,  A'2)  =  0], 
then  A'2l 
else  A'3; 

Jo  =/(m,e,k)  =  if  (S(0, /1 )  A  Ji  >  k), 

then  I\ , 

else  if  (S(0,/2)A/2  >  k), 


\ 


then  /2, 
else  I3 . 
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We  proceed  similarly  in  the  induction  step,  and  we  define  the  functioned  7,„d 


(  r,  if  Sp(n  +  l,r)  Ar  >  fc; 

7md(ni,  e,  k,  n)  =  <  mi,  if  Sr(n  +  1,  mi)  A  mj  >  k; 

t  ai  otherwise. 

Here  ai  is  a[n,<];  a[n,  x]  is  a  parameter  deriving  from  the  interpretation  of  the 
inductive  hypothesis  Vc.3a.S(n,a)  A  a  >  c  -  namely,  S^ai)  A  aj  >  t  Finally, 
we  define  the  functionals  B ,  D,  X  and  7  corresponding  to  the  conclusion  of  the 
Induction  Rule,  Step  1.  For  instance,  define  7  to  be 

7(0,  m,  e,  k)  =70(m,  e,  k) 

7(n  +  l,m,e,k)  =7in<f(AA:.7(n,m,e,7),m,e,k,n) 

by  primitive  recursion.  This  concludes  the  interpretation  of  Step  1.  The  interpre¬ 
tation  of  Steps  2  and  3  is  omitted. 

13.5.  Choices  for  the  “Hidden  Parameters”. 

Before  giving  a  formal  characterization  of  the  Non- Triviality  Condition,  we  con¬ 
sider  some  examples  of  evaluation  of  the  functionals.  Here  let  77.  =  {F(l),  F2(l), ...} 
C  Hf  be  the  result  of  iterating  the  functional  \n.F(x,  m,  e,  q,  u,  n)  extracted  from 
the  proof  of  the  Infinite  Ramsey  Theorem,  for  the  given  values  of  the  parameters 
m,e,q,u,  n;  write  h[z,v ^  for  77,  fl  [x,  y]  and  let  be  the  ^-homogeneous  set  given 
by  n  iterations  of  F. 

Example  0.  Let  m[n, x,y]  =  max(n  -j-  l,y),  e[n,x]  =  0.  Then  in  the  Herbrand 
expansion  of  Step  10  we  have  ej  =  e2  =  tz  =  0,  mj  =  t  =  k,  m2  =  m3  =  1 
and  the  defining  conditions  for  Sf  are  tautological,  thus  Sf  is  N.  Similarly  for  the 
expansion  of  Step  1"+1.  Thus  S^Cn)  =  N  for  all  n,  and  so  Hip  —  N,  too.  Not 
surprisingly,  the  iteration  of  F  in  this  case  grows  linearly. 

Example  1:  As  usual,  let  S(  —  1)  =  N,  Green  (n)  =  {2  :  x(n,r)  =  0}  and  Red 
(n)  =  {z  :  x(n,z)  =  1}  (by  our  assumption,  for  all  2  in  Green  (n)  or  Red  (n), 
2  >  n).  Let 


;[n,x]  = 


m[n,  x,  y)  = 


0,  if  Green  (n)  D  S(n  —  1)  is  unbounded; 

max{  Green  (n)  fl  S(n  —  1))  otherwise. 

fiz.z  £  Green  (n)  fl  S(n  —  1)  A  2  >  y 

if  Green  ( n )  D  S(n  —  1)  is  unbounded; 
0  otherwise. 
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Functions  m  and  e  satisfying  the  above  conditions  axe  in  fact  Skolem  functions  for 
def  S(n),  the  defining  conditions  of  S(n),  as  well  as  for  def  x atab  and  so  “preserve 
the  meaning”  of  those  definitions.  There  is  nothing  to  verify  here. 

Notice  that  for  this  m  and  e  we  can  choose  colorings  that  make  -  the 
/- th  iteration  of  F  -  grow  as  fast  as  desired,  i.e.,  this  choice  gives  no  bound  for 
R(2,2,  l).  Also  notice  that  is  an  extension  of  thus  from  the  set  H*  by 

compactness  we  obtain  again  the  Infinite  Ramsey  Theorem,  as  expected. 

Example  2:  Let  S(— 1)  =  [p],  Green  (n)  and  Red  (n)  as  before. 


f  0,  if  \Green  (n)  ft  S(n  —  1)|  >  | Red  (n)  fl  S(n  —  1)|; 
\  p  otherwise. 


m[n,x,y\ 


pz  <  p.z  G  Green  (n)  fl  5(n  —  1)  A  z  >  y 

if  |  Green  ( n )  H  S(n  —  1)|  >  | Red  (n)  Pi  S(n  —  1)|; 
pz  <  p.z  G  Red(n)  fl  S(n  —  1), 
otherwise. 


If  p  >  22,_1,  the  above  choice  for  m  and  e  makes  S>(n)  fl  [p]  satisfy  the  definition  of 
S(n)  in  the  Finite  Ramsey  Theorem  amd  as  k  varies  over  [p],  /(n,  m,  e,  k)  generates 
the  elements  of  S(n )  —  notice  that  for  y  >  p,  ra[n,x,y]  =  0:  considering  the 
Herbrand  expansion  of  Step  10  we  see  that  (1)  becomes  a  tautology  for  k  >  p;  thus 
N  \  [p  —  1]  C  S*(0)  — .  We  may  conclude  that  with  this  choice  of  parameters  (and 
with  suitable  choices  for  q  and  u)  by  iterating  the  functional  F  l  times  we  generate 
a  x-homogeneous  set  H*\  Following  the  proof  of  the  Finite  Ramsey  Theorem 
(section  11.2),  we  can  check  that  C  [p]  for  any  x,  i-e.,  the  familiar  bound  is 
preserved. 

Example  3:  Let  [ni,ri2],  a0,...,  ap,  bo,...,bq,  Ai,...,  Ap ,  be  as  in  section 

(11.3)  and  consider  the  definition  by  cases  of  S(n)  given  in  Proof  2,  section  (11.3). 


f  0  if  S(n )  =  Green(n)  fl  S(n  —  1); 
\  ri2  otherwise. 


m[n,  x,  y] 


pz  <  ri2.z  G  Green  (n)  fl  S(n  —  1)  A  z  >  y 
if  S(n)  =  Green(n)  D  S(n  —  1); 
pz  <  ri2-z  G  Red  (n)  fl  S(n  —  1) 
otherwise. 


As  before,  we  check  that  with  this  choice  of  parameters  (and  with  suitable  choices 
for  q  and  u)  SF(n)n[nj  ,02]  satisfies  the  definition  of  S(n)  in  the  RPH  theorem  and 
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as  7  varies  over  [ni,n2]  7(n,m,  e,  k )  generates  the  elements  of  S(n)  and  F  generates 
a  x-homogeneous  large  set  H[x’y^  for  any  x,  i.e.,  the  familiar  bound  is  preserved. 

From  the  examples  we  see  that  our  computation  will  produce  one  of  the  fol-  * 

lowing  outcomes,  depending  on  the  choice  of  the  parameters  and  m,  e: 

(i)  as  k  varies,  the  functional  7(n,m,e,7)  gives  values  both  in  Green  (n)  and  f 

in  Red  (n)  and  the  set  77*  is  not  x-homogeneous; 

(ii)  as  k  varies,  the  functional  7(n,m,  e,  k )  gives  values  only  in  Green  ( n )  or  in 
Red  (n),  and  thus  the  set  77,  is  x-homogeneous; 

(iii)  as  k  varies  within  a  segment  [x,y]  of  N,  the  functional  7(n,m,e,7)  gives 
values  only  in  Green  (n)  or  in  Red  (n),  thus  the  set  77.  is  X'-homogeneous  in  the 
segment  [x,  y]. 

Finally,  information  about  the  cardinality  of  a  certain  segment  of  Ho  requires 
additional  proof.  In  example  2  we  needed  to  know  that  p  —  r(l)  in  order  to  argue 
that  |7li0’pl|  >  l  independenly  of  x  and  in  example  3  we  used  the  fact  that  n2  = 

/r(n!)  in  arguing  that  is  large,  for  any  x- 

The  condition  for  the  “non-triviality”  of  the  computation  is  easily  spelled  out. 

Given  a  certain  choice  of  m  and  e,  let 

p(0,k)  =[(x(0,  m[0, X,  5])  =  0  A  m[0,X,£]  >  B)  A  X(0,X)  =  0] 
p{n  +  1,7)  =[(S(iV,m[n  4-  1,X,B])  A  x(n  +  l,m[n  +  1  ,X,B])  =  0A 

A  m[n  -f  1,  A,i?]  >  B)  A  S(n,  X)  A  x(^  +  1>-^)  =  0] 

a(0,  k)  =[(x(0,  D)  =  0  D  D  <  e[0,  X})  A  *(0,  X)  =  1] 
u(n  +  1,7)  =[(5(n,D)  A  x(«  +  1,7?)  =  0  D  D  <  e[n  +  1,  X])A 

A  S(n,X )  A  x(n  +  1,  X)  =  1] 

(here  B,  D  and  X  depend  on  n  and  7,  and  by  definition  of  X  the  value  A'  =  7  is 
tested).  For  the  “non-triviality”  of  F  (over  a  certain  segment  [x,y])  we  need 

(NTC):  for  all  n,  if  S(n  —  1,  n),  then  (V7./?(n,  7))  V  (V7.a(n,  7)  and  V7.p(n,  7)  = 

r 

-><r(n,  7). 

(NTC)[x,  y]:  for  all  n  €  [x,  y],  if  S(n-1,  n),  then  (V7I<jt<y.p(n,  7))V(V7I<jt<y.a(n,  7) 
and  V7r<t<rp(n,  7)  =  ->o-(n,7). 

The  Parametrized  Ramsey  Theorem  (section  1.2.1)  is  now  proved.  ■ 
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14.  The  Compactness  Argument. 

In  the  last  section  we  have  made  choices  of  parameters  m,  e,  q  and  u,  relying  on 
well-known  facts  of  finite  combinatorics  and  we  have  shown  that  for  those  choices  the 
desired  sets  are  generated  by  iteration  of  the  functionals  within  known  bounds.  It  is 
conceivable  that  if  we  work  with  a  compactness  argument,  there  may  be  implicit  in 
the  part  of  the  proof  to  which  the  IRT  is  applied  (1)  a  particular  choice  of  a  coloring 
Xo  and  (2)  specific  numeric  functions  for  m,  e,  q  and  u,  such  that  they  may  be 
mechanically  uncovered  by  some  proof-theoretic  transformation.  We  might  hope 
that  (1)  the  coloring  xo  would  give  information  about  a  “worst  case  coloring”  or  (2) 
the  numeric  functions  for  m,  e,  q  and  u  would  be  choice  functions  operating  on  an 
initial  fragment  of  xo-  In  these  cases  the  answer  to  Question  1  (section  11.4)  would 
be  positive.15  Part  of  the  problem  is  to  decide  what  the  compactness  argument 
is  -  different  mathematical  techniques  may  produce  different  proofs  and  different 
bounds.  An  obvious  choice  is  the  use  of  Konig’s  Lemma. 

Compactness  Argument.  Assume  the  negation  of  the  FRT,  namely  for  given  c, 

*,  /, 

->FRT^  .  for  each  n  there  is  a  coloring  £n  :  [n}k  — ►  c  such  that  every  set  H  C  [n]  of 
cardinality  l  is  not  £n-homogeneous. 

The  set  of  finite  colorings  £„  falsifying  the  FRT,  ordered  by  the  relation  “f,  is 
extended  by  £j”.  forms  a  tree,  which  by  our  assumption  is  infinite.  At  each  node 
:  [«]*  — ►  c  there  are  at  most  extensions  :  [n  +  1]*  — ►  c  of  £n.  By  Konig’s 

Lemma  there  is  an  infinite  path  through  our  tree,  i.e.,  a  coloring  x  :  [N]*  — ►  c  such 
that  every  set  H  of  cardinality  /  is  not  x-homogeneous.  This  contradicts  IRT^, 
the  IRT  with  exponent  k.  ■ 

The  above  argument  may  be  formalized  by  a  derivation  V  in  PA2,  the  sequent 
calculus  for  second  order  PA  as  follows.  Let  KL  be  a  formalization  of  Konig’s 

15  Although  a  detailed  analysis  is  beyond  the  scope  of  this  paper,  the  following  remarks 
provide  evidence  for  our  belief  that  the  results  presented  in  the  previous  sections  are 
optimal  for  the  techniques  under  consideration. 
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lemma.  16  Let  and  D 2  be  derivations  in  PA2  of  IRT^  and  KL,  respectively; 
let  Do  be  a  derivation  of 

(o)  IRT<*>,  KL,  -FRT<*>  h  . 

in  LK2,  the  sequent  calculus  for  pure  second  order  logic.  Now  D  results  from  X>f,  D2 
and  Do  by  two  applications  of  Cut.  We  are  interested  in  the  following  transforma¬ 
tion:  apply  Cut-Elimination  to  D  and  then  the  No  Counterexample  Interpretation 
to  the  resulting  derivation  D1 . 

Notice  that  FRT^  has  the  form  3n.V£„.^(£n,  n)  and  that  the  NCI  of  D\  yields 
a  functional  N  such  that  (f>p(£[N],  N)  is  true  for  all  choice  of  numerical  functions  for 
the  parameters.  Here  £  is  a  new  fc-f  1-ary  function  parameter,  representing  an  infinite 
sequence  of  finite  colorings  {£„  :  [n]*  — >  c}n,  i.e.,  any  attempted  counterexample  to 
the  FRT.  Moreover,  £  may  be  regarded  as  an  infinite  coloring  £  :  [N]fc+1  — *•  c  by 

(*)  £(*o, •••,**)  = 

(we  assume  to  <  . . .  <  z  jt ). 

We  have  not  checked  this  in  detail,  but  we  conjecture  a  negative  answer  to 
Question  1  on  the  basis  of  the  following  experiment.  The  Finite  Ramsey  Theorem 
with  exponent  k  follows  from  the  Infinite  Ramsey  Theorem  with  exponent  k  +  1. 
Let  Z>f+1  be  a  derivation  of  IRT^fc+1^  and  let  D.  be  a  derivation  in  LK2  of 

(A)  IRT(fc+1)  b  VC.3n>(C(n),n). 

If  D  is  the  derivation  ending  with  an  application  of  Cut  to  the  conclusions  of  X>f+1 
and  D»,  then  it  is  easy  to  see  that  after  the  elimination  of  this  Cut  and  application 
of  the  NCI,  the  functional  N  still  depends  on  the  coloring  £  —  which  is  arbitrary 
—  and  on  the  parameters  m  and  e  —  rather  than  on  specific  numeric  functions.  17 

16  We  write  IRT^  and  FRT^  for  their  formalization,  too. 

17  The  significance  of  this  experiment  for  an  analysis  of  the  compactness  argument 
follows  from  the  following.  (1)  Ceteris  paribus ,  the  NCI  of  a  derivation  of  h  3n.V£n.d>(£„ ,  n) 
has  the  same  form  as  the  the  NCI  of  a  derivation  of  h  VC.3n.d>(C(n),n).  (2)  Following 
Kunen  [1977] ,  the  argument  in  the  proof  of  the  Infinite  Ramsey  Theorem  for  the  existence 
of  an  infinite  pre-homogeneous  set  for  £  :  [N]*+1  — ►  c  is  in  fact  an  application  of  Konig’s 
Lemma.  In  our  terminology  and  in  the  case  of  k  =  2,  this  is  the  argument  that  establishes 
the  existence  of  the  infinite  set  H\  -  corresponding  to  Steps  1  and  2. 
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15.  Conclusion. 


What  conclusions  may  we  draw  from  our  experiment?  Our  application  of  Proof 
Theory  to  Combinatorics  has  produced  the  Parametrized  Ramsey  Theorem,  a  gen¬ 
eral  logical  frame  for  “Ramsey-type”  results.  Additional  computational  instruc¬ 
tions,  in  the  form  of  choice-function  parameters,  yield  the  Infinite,  the  Finite  and 
the  Paris-Harrington  versions  of  Ramsey’s  Theorem  (see  Question  2). 

From  this  exercise  we  have  not  obtained  new  bounds  for  the  Finite  Ramsey 
Theorem.  18  It  is  an  open  question  whether  one  can  provide  new  function  parame¬ 
ters  for  which  the  interpretation  is  non-trivial  on  a  certain  segment  [x,y]  and  such 
that  {F(x), . . . ,  F(,)(x)}  C  [x,  y ]  for  any  coloring  x-  19 

We  have  considered  fragments  of  arithmetics  in  which  the  No  Counterexample 
Interpretation  has  a  simple  definition  and  the  functionals  are  primitive  recursive  in 
the  function  parameters.  In  particular,  using  results  by  Sieg  we  have  obtained  a 
straigtforward  estimation  of  the  complexity  of  the  functional  interpretation  of  the 
Infinite  Ramsey  Theorem  (section  13.1). 

We  have  shown  that  Ketonen’s  Direct  Logic  and  Girard’s  Linear  Logic  can  be 
used  to  keep  cumbersome  computations  under  control  -  in  these  logics  Herbrand’s 
Theorem  has  minimal  complexity  and  for  proofs  in  II^-IR  the  result  of  evaluating 
the  functionals  is  invariant  under  elimination  of  Ilj-Cuts. 

The  interest  of  this  approach  is  increased  by  the  fact  that  Direct  Logic  is  the 
logic  of  the  decision  procedure  of  the  proof-checker  EKL  (see  Ketonen  [1983]); 
thus  implementation  in  EKL  of  the  functional  interpretation  will  make  extensive 
experimentation  more  accessible. 

18  The  functional  obtained  from  the  Infinite  Ramsey  Theorem  depends  on  the  given 
coloring  x  :  [N]2  — *  2.  By  choosing  suitable  function  parameters  we  made  the  functional 
depend  only  on  an  initial  segment  of  x,  but  the  bound  was  explicitly  provided  with  the 
parameters  rather  than  extracted  from  the  proof.  On  the  other  hand,  the  application  of 
the  functional  interpretation  to  the  compactness  argument  from  the  Infinite  to  the  Finite 
Ramsey  Theorem  introduces  a  new  parameter  £  that  may  be  regarded  as  an  arbitrary 
coloring  x  :  [N]3  ~ *  2.  We  have  been  unable  to  mechanically  extract  choice-functions 
depending  on  an  initial  segment  of  £  only. 

19  On  the  other  hand,  significant  improvement  on  these  bounds  are  obtained  using  a 
completely  different  proof  idea  for  the  Finite  Theorem  that  has  no  analogue  in  the  Infinite 
Theorem  (see  the  alternative  proof  by  double  induction  in  Graham  et  al.[l980],  p.3). 
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17.  Index  of  Names. 

^  Ackermann  function,  165 

Box  Condition,  56  (in  a  Proof-Structure) 

If  Box  Condition,  98  (in  a  family  of  quasi-structures) 

Box  Lemma,  71 

Box-Door  Lemma,  77  (for  proof-nets  for  MALL) 

CH(X),  133  (the  union  of  all  chains  that  start  with  X) 

Ch(X),  133  (the  union  of  all  pure  chains  that  start  with  A') 

Coherent  Semantics,  45 

Commutative  Linear  Logic,  42 

Completeness  Theorem,  47  (for  Phase  Semantics) 

Connectedness  Condition,  56  (in  a  Proof-Structure) 

Connectedness  Condition,  98  (in  a  family  of  quasi-structures) 

Contraction  Rule,  44  (of  the  Sequent  Calculus  for  Linear  Logic) 

Contraction  link,  49  (in  a  proof-structure) 

Contraction  rule,  165  (unrestricted,  in  Classical  Sequent  Calculus  LK) 
Counterexample  to  Herbrand’s  Theorem,  149  (for  Linear  Logic,  in  the  general  case) 
Cut  Rule,  44  (of  the  Sequent  Calculus  for  Linear  Logic) 

Cut  formula,  44  (in  the  Sequent  Rule  of  Cut) 

Cut  link,  49  (in  a  proof-structure) 

Direct  Logic  DL,  126  (in  a  Sequent  Calculus,  with  the  rule  of  Mingle) 

Direct  Logic  DL'*’  ,  126  (in  a  Sequent  Calculus,  with  the  rule  of  Weakening) 

Door  Lemma,  73  (for  proof-nets,  MLL  case) 

Door  Lemma,  79  (for  proof-nets,  MALL  case) 

Equivalence  Theorem,  101  (between  proof-nets  and  proof-networks) 

Exchange,  42  (commutative,  noncommutative) 

Exchange,  126  (in  the  Sequent  Calculus  for  Direct  Logic) 

/  Finite  Ramsey  Theorem  (FRT),  34 

Green(x),  174  (in  Ramsey’s  Theorem) 

Grzegorczyk  hierarchy,  165 
Herbrand’s  Theorem,  144 

Herbrand’s  form,  144  (of  a  set  of  formula-occurrences) 


228 


Section  17 


Herbrand’s  function,  144  (associated  with  an  essentially  universal  quantifier,  variable) 
Herbrand’s  Theorem  for  MLL,  149  (for  prenex  sequents) 

Infinite  Ramsey  Theorem  (IRT),  34 
Konig’s  Lemma,  176 

Language  £/,,  41  (language  for  Linear  Logic) 

Least  Number  Principle,  166  (used  in  the  choice  of  Herbrand's  functions) 

Mingle,  126  (in  the  Sequent  Calculus  for  Direct  Logic) 

Multiplicative  Disjunction  Lemma,  92  (for  proof-structures  for  MLL) 

No  Counterexample  Interpretation  (NCI),  166 
Non-Commutative  Linear  Logic,  41 

Non-Triviality  Condition,  220  (for  the  choice  of  parameters  in  the  PRT) 
Parameters  Condition,  56  (in  a  Proof-Structure) 

Parameters  Condition,  99  (in  a  family  of  quasi-structures) 

Parametrized  Ramsey  Theorem  (PRT),  196 
Permutability  Theorem,  148  (for  propositional  MLL) 

Phase  Semantics,  46 

Planarity  Condition,  106  (for  noncommutative  proof-structures 
Primitive  Functional  Interpretation,  167 

Pure  Parameter  Property,  45  (of  a  Sequent  Calculus  derivation) 

QF(^t)  -  IA,  168  (fragment  of  Peano  Arithmetic) 

QF-IA,  168  (fragment  of  Peano  Arithmetic) 

Quasi-Transitivity  Lemma,  68 
RLV(X),  133 

Ramsey-Paris-Harrington  Theorem  (RPH),  34 
Red(x),  174  (in  Ramsey’s  Theorem) 

Reduction  Lemma,  114  (for  the  Cut-Elimination  Theorem) 

Sequent  Calculus  LL,  45  (for  first  order  Linear  Logic) 

Sequent  Calculus  MALL,  45 
Sequent  Calculus  MLL,  45 
Sequent  Calculus  MLL-,  45 
Sequent  Calculus  NCMALL,  45 
Sequent  Cal  cuius  NCMLL,  45 
Sequent  Calculus  NCMLL-,  45 
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Sequentialization  Theorem,  66  (from  Proof-Nets  to  Sequent  Derivations) 
Sequentialization  Theorem,  140  (for  Direct  Logic) 

Shared  Empires  Lemma,  74 

Structure  Theorem,  61  (for  inductively  defined  proof-structures) 
Structure  Theorem,  66  (from  Sequent  Derivations  to  Proof- Nets) 
Structure  Theorem,  137  (for  Direct  Logic) 

Substructure  Theorem,  75  (for  proof-nets,  MLL  case) 

Tiling  Lemma,  73  (for  proof-nets,  MLL  case) 

Tiling  Lemma,  79  (for  proof-nets,  MALL  case) 

Vicious  Circle  Condition,  56  (in  a  Proof-Structure) 

Vicious  Circle  Condition,  98  (in  a  family  of  quasi-structures) 

Weakening,  126  (in  the  Sequent  Calculus  for  Direct  Logic) 

active  formulas,  44  (in  an  inference  of  Sequent  Calculus) 

additive  rules,  43  (of  the  Sequent  Calculus  for  Linear  Logic) 

ancestor,  44  (of  a  formula-occurrence  in  a  Sequent  Calculus  derivation) 

ancestor,  50  (of  a  formula-occurrence  in  a  Proof-Structure) 

ancestor,  127  (of  a  formula-occurrence  in  a  proof-structure  for  Direct  Logic) 

annotations,  82  (for  proof-structures) 

axioms,  42  (of  the  Sequent  Calculus  for  Linear  Logic) 

axioms,  126  (of  the  Sequent  Calculus  for  Direct  Logic) 

chain,  87 

closed  door,  55  (or  side  door,  of  an  empire) 

coherent  space,  45 

coloring  function  x  :  [N]fc  — ►  c,  34 

complementary  substructure,  54  (of  a  substructure  in  a  proof-structure) 
conclusion,  48  (in  a  proof-structure) 

conditional  terms,  147  (used  in  constructing  Herbrand’s  terms) 
connection  ||,  87  (of  formula-occurrences  through  an  axiom) 
cycle,  87 

descendant,  50  (of  a  formula-occurrence  in  a  Proof-Structure) 
diagonal  intersection,  172  (in  Ramsey’s  Theorem) 
dominate,  130  (an  element  dominates  a  loop) 
dominate,  166  (a  function  dominates  another  function) 
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doors,  55  (of  an  empire  in  a  proof-structure) 

eigen  variable,  45  (of  a  universal  quantification  in  a  Sequent  Calculus  derivation) 

embedding,  54  (between  proof-structures)  f 

empire  e(.  .  .),  55  (of  a  formula-occurrence  in  a  Proof-Structuit) 

empire  .  .)  relative  to  a  path,  87  (of  a  formula-occurrence  in  a  proof-structure)  j- 

empire  e[.  .  .],  98  (of  a  class  of  formula  occurrences  in  a  family  of  quasi-structures) 
empire-sequence,  67 

essentially  existential,  144  (quantifier,  variable) 
essentially  universal,  144  (quantifier,  variable) 
exit  of  a  loop,  129 

exponentiation  rules,  44  (of  the  Sequent  Calculus  for  Linear  Logic) 

fake  door,  55  (or  open  door,  of  an  empire) 

flagging  function,  48  (in  a  proof-structure) 

functionals  of  the  Predicate  Calculus,  147 

ghost  door,  55  (of  an  empire) 

ghost  formula-occurrence,  49  (in  a  proof-structure) 
homogeneous,  34  (with  respect  to  a  coloring  x) 
inductive  proof-structures,  51 

introduce,  148  (a  formula-occurrence  in  a  sequent  derivation) 
large  set  x  :  [N]*  — ►  c,  34 

links,  127  (in  a  proof-structure  for  Direct  Logic) 
links,  48  (in  a  proof-structure) 
loop,  129 

main  door,  55  (of  an  empire) 
maze,  130 
minimal  path,  86 

multiplicative  rules,  43  (of  the  Sequent  Calculus  for  Linear  Logic)  ^ 

normal  tree,  68  (of  empire-sequences) 

open  door,  55  (or  fake  door,  of  an  empire)  > 

parameter,  45  (of  a  universal  quantification  in  a  Sequent  Calculus  derivation) 
path,  86  (in  a  set  of  formula-occurrences) 

permutation  of  inferences,  exceptions,  147  (in  the  Sequent  Calculus  for  Linear  Logic) 
pervasive  path,  128 
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phase  space,  46 

premise,  48  (in  a  proof-structure) 

preserving  links,  53  (map  between  proof-structures) 

principal  formula,  44  (in  an  inference  of  Sequent  Calculus) 

proof-net  for  MALL,  57  (propositional,  first  order) 

proof- net  for  MLL,  57  (propositional,  first  order) 

proof- network,  99 

proof- structure  with  boxes,  59 

proof-structure,  48  (for  Commutative  Linear  Logic) 

proof-structure,  106  (for  Noncommutative  Multiplicative  Linear  Logic) 

proof-structure,  107  (for  Noncommutative  Multiplicative  and  Additive  Linear  Logic) 

proof-structure,  127  (for  Direct  Logic) 

proof-structures  as  graphs,  128 

proof-structures  for  MALL,  50 

proof-structures  for  MLL,  50 

proof-structures  for  MLL-,  50 

pure  chain,  87 

pure  empire-sequence,  68 

quantification  rules,  43  (of  the  Sequent  Calculus  for  Linear  Logic) 
quasi-structure,  9^ 

rules  of  inference,  126  (of  the  Sequent  Calculus  for  Direct  Logic) 

side  door,  55  (or  closed  door,  of  an  empire) 

side  formulas,  44  (in  an  inference  of  Sequent  Calculus) 

Structural  rules,  42  (of  the  Sequent  Calculus  for  Linear  Logic) 

structural  rules,  44  (of  the  Sequent  Calculus  for  Linear  Logic) 

Structural  rules,  126  (of  the  Sequent  Calculus  for  Direct  Logic) 

subformulas,  set  r"<,  127  (the  set  of  occurrences  of  subformulas  in  T) 

substructure,  54  (of  a  proof-structure) 

terminal  element,  129  (of  a  chain) 

topolineax  space,  46 

tree  of  empire- sequences,  67 


